Description
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
References
- 1553 vdb-entry
- mdaemon-session-id-hijack(5070) vdb-entry
- 20000809 Session hijacking in Alt-N's MDaemon 2.8 mailing-list