CVE-2006-4658 Information

Description

Panda Platinum Internet Security 2006 10.02.01 and 2007 11.00.00 uses sequential message numbers in generated URLs that are not filtered if the user replies to a message which might allow remote attackers to determine mail usage patterns.

Reference

http://secunia.com/advisories/21769 http://securityreason.com/securityalert/1524 http://www.security.nnov.ru/advisories/pandais.asp http://www.securityfocus.com/archive/1/445479/100/0/threaded http://www.securityfocus.com/bid/19891

Share on: