CVE		CVE-2009-1580
Status		Candidate
Description		Session fixation vulnerability in SquirrelMail before 1.4.18 allows remote attackers to hijack web sessions via a crafted cookie.
Severity		Medium
CVSS score		5,8
CVSS vector		(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Phase		Assigned (21.08.2010)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2009-1580
References		BID : 34916
		CONFIRM : http://squirrelmail.svn.sourceforge.net/viewvc/squ...
		CONFIRM : http://squirrelmail.svn.sourceforge.net/viewvc/squ...
		CONFIRM : http://www.squirrelmail.org/security/issue/2009-05-11
		CONFIRM : https://bugzilla.redhat.com/show_bug.cgi?id=500358
		FEDORA : FEDORA-2009-4870
		FEDORA : FEDORA-2009-4880
		MANDRIVA : MDVSA-2009:110
		SECUNIA : 35052
		SECUNIA : 35073
		VUPEN : ADV-2009-1296
		XF : squirrelmail-baseuri-session-hijacking(50462)
SecurityVulns:		Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)