CVE-2003-1481: Infoleak
CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1481?
CVE-2003-1481 is considered a high-severity vulnerability due to the potential for remote session hijacking.
How do I fix CVE-2003-1481?
To fix CVE-2003-1481, update CommuniGate Pro to a version that does not expose session IDs in the referer field.
Which versions of CommuniGate Pro are affected by CVE-2003-1481?
Versions 3.1 through 4.0.6 of CommuniGate Pro are affected by CVE-2003-1481.
What type of attacks can exploit CVE-2003-1481?
CVE-2003-1481 can be exploited by attackers who craft malicious emails containing IMG tags to capture vulnerable session IDs.
Is there a workaround for CVE-2003-1481 if I cannot update?
A temporary workaround may involve disabling the display of external images in emails to mitigate the risk of session hijacking.