← Database

CVE-2000-0716

LOW CVSS: 2.6 Published: 2000-10-20 Modified: 2026-06-16

Description

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.

Affected Platforms

Alt-N Mdaemon

Weakness Type

NVD-CWE-Other

References