CVE-2001-1284: High severity Ipswitch IMail vulnerability
Published Oct 12, 2001
·Updated
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users.
Affected Software
3 affected components
Ipswitch IMail=6.0.6
Ipswitch IMail=6.0.2
Ipswitch IMail=7.0.4
Event History
Oct 12, 2001
CVE Published
04:00 AM
May 3, 2002
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2001-1284?
CVE-2001-1284 is considered a high severity vulnerability due to its potential for session hijacking.
2
How do I fix CVE-2001-1284?
To fix CVE-2001-1284, upgrade to a version of Ipswitch IMail that is not affected, specifically versions later than 7.0.4.
3
Which versions of Ipswitch IMail are affected by CVE-2001-1284?
CVE-2001-1284 affects Ipswitch IMail versions 6.0.2, 6.0.6, and 7.0.4 and earlier.
4
What type of attack does CVE-2001-1284 expose users to?
CVE-2001-1284 exposes users to session hijacking attacks that allow remote attackers to impersonate legitimate users.
5
Is there a workaround for CVE-2001-1284 while waiting for a patch?
There are no known effective workarounds for CVE-2001-1284; upgrading to a patched version is recommended.