CVE-2009-4655

Publication date

2010-02-26 18:09:00

Family

mitre

State

PUBLISHED

Description

The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.