CVE Vulnerabilities

CVE-2009-5051

Published: Jan 18, 2011 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

Hastymail2 before RC 8 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.

Affected Software

Name Vendor Start Version End Version
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *
Hastymail2 Hastymail * *

References