Security Advisory
CVE-2000-0716
2.6
Vulnerability Description
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
Published Date
October 20, 2000
Official Source
NIST NVD Advisory