CVE-2000-0716

LowCVSS 2.6/10Last modified Jun 16, 2026

Description

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.

Metrics

CVSS 2.0 2.6/10AV:N/AC:H/Au:N/C:P/I:N/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459Patch, Vendor Advisory
http://www.securityfocus.com/bid/1553Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5070
http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0008&L=ntbugtraq&F=&S=&P=459Patch, Vendor Advisory
http://www.securityfocus.com/bid/1553Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/5070

Timeline

Published: Oct 20, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-07175.0GoodTech FTP server allows remote attackers to cause a denial of service via a large number of RNTO commands.CVE-2000-07181.2A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.CVE-2000-07196.2VariCAD 7.0 is installed with world-writeable files, which allows local users to replace the VariCAD programs with a Trojan horse program.CVE-2000-07205.0news.cgi in GWScripts News Publisher does not properly authenticate requests to add an author to the author index, which allows remote attac CVE-2000-07216.2The FSserial, FlagShip_c, and FlagShip_p programs in the FlagShip package are installed world-writeable, which allows local users to replace CVE-2000-07226.2Helix GNOME Updater helix-update 0.5 and earlier allows local users to install arbitrary RPM packages by creating the /tmp/helix-install ins CVE-2000-07231.2Helix GNOME Updater helix-update 0.5 and earlier does not properly create /tmp directories, which allows local users to create empty system CVE-2000-07246.2The go-gnome Helix GNOME pre-installer allows local users to overwrite arbitrary files via a symlink attack on various files in /tmp, includ CVE-2000-07257.2Zope before 2.2.1 does not properly restrict access to the getRoles method, which allows users who can edit DTML to add or modify roles by m CVE-2000-07262.6CGIMail.exe CGI program in Stalkerlab Mailers 1.1.2 allows remote attackers to read arbitrary files by specifying the file in the $Attach$ h CVE-2000-07277.6xpdf PDF viewer client earlier than 0.91 does not properly launch a web browser for embedded URL's, which allows an attacker to execute arbi CVE-2000-07287.2xpdf PDF viewer client earlier than 0.91 allows local users to overwrite arbitrary files via a symlink attack.