CVE-2001-1545 | BDVDB-2026-11449 Detail

Description#

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.macromedia.com/v1/handlers/index.cfm?ID=22291&Method=Full
http://www.iss.net/security_center/static/7679.php
http://www.securityfocus.com/bid/3665

Exploit#

No public exploit known

History#

Version 12005-07-14Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.