CVE-2006-4658

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message, which might allow remote attackers to determine mail usage patterns.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2006-09-09

Last modified

2024-08-07

Affected products

• Panda Platinum Internet Security (Panda)

References

• http://secunia.com/advisories/21769
• http://securityreason.com/securityalert/1524
• http://www.security.nnov.ru/advisories/pandais.asp
• http://www.securityfocus.com/archive/1/445479/100/0/threaded
• http://www.securityfocus.com/bid/19891