CVEvulnerability

CVE-2003-1481

5.8 MEDIUM Published 2003-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2003-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:N
Weaknesses
CWE-200

Description

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

Affected configurations

• stalker communigate pro 3.1 • stalker communigate pro 3.2.4 • stalker communigate pro 3.2 b5 • stalker communigate pro 3.2 b7 • stalker communigate pro 3.3.2 • stalker communigate pro 3.3 b1 • stalker communigate pro 3.3 b2 • stalker communigate pro 3.4 b3 • stalker communigate pro 4.0.1 • stalker communigate pro 4.0.2 • stalker communigate pro 4.0.3 • stalker communigate pro 4.0.6 • stalker communigate pro 4.0 b2 • stalker communigate pro 4.0 b3

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References