CVE-2009-1580

Description

Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.

Affected Platforms

Weakness Type

CWE-287

References

• http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html
• http://secunia.com/advisories/35052
• http://secunia.com/advisories/35073
• http://secunia.com/advisories/35140
• http://secunia.com/advisories/40220
• http://squirrelmail.svn.sourceforge.net/viewvc/squirrelmail/branches/SM-1_4-STAB…