Description
Gabber 0.8.7 sends an email to a specific address during user login and logout, which allows remote attackers to obtain user session activity and Gabber version number by sniffing.
References
- 6624 vdb-entry
- 20030115 Gabber 0.8.7 leaks presence information without user authorization mailing-list
- gabber-information-leak(11115) vdb-entry