CVE-2004-2766

Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486.

Score

CVSS 2.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2010-01-28

Last modified

2024-09-16

Weaknesses

CWE-200

Affected products

• Iplanet Messaging Server (Sun)
• One Messaging Server (Sun)

References

• http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-201180-1