Description
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
References
- http://www.ipswitch.com/Support/IMail/news.html
- 3428 vdb-entry
- 20011011 Ipswitch Imail 7.04 vulnerabilities mailing-list