7.5
CVSSv2

CVE-2005-4266

Published: 15/12/2005 Updated: 05/09/2008
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 668
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

WorldClient.dll in Alt-N MDaemon and WorldClient 8.1.3 trusts a Session parameter that contains a randomly generated session ID that is associated with a username, which allows remote malicious users to perform actions as other users by guessing or sniffing the random value.

Vulnerable Product Search on Vulmon Subscribe to Product

alt-n mdaemon 8.1.3

alt-n worldclient 8.1.3