CVE Vulnerabilities

CVE-2002-2165

Published: Dec 31, 2002 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browsers previous login session in an error page, which allows local users to read another users inbox.

Affected Software

Name Vendor Start Version End Version
Imho_webmail Imho 0.98 0.98
Imho_webmail Imho 0.96.2 0.96.2
Imho_webmail Imho 0.98.2 0.98.2
Imho_webmail Imho 0.97.1 0.97.1
Imho_webmail Imho 0.96.1 0.96.1
Imho_webmail Imho 0.98.3 0.98.3
Imho_webmail Imho 0.96.3 0.96.3
Imho_webmail Imho 0.97 0.97
Imho_webmail Imho 0.96 0.96

References