6 lines
No EOL
544 B
Text
6 lines
No EOL
544 B
Text
source: http://www.securityfocus.com/bid/13683/info
|
|
|
|
The MimeMessage method in the Sun JavaMail API does not perform sufficient validation on message number values that are passed to the method during requests. An attacker that can successfully authenticate to an email server implementation that is written using the Sun JavaMail API, may exploit this issue to make requests for arbitrary email messages that are stored on the server.
|
|
|
|
http://www.example.com/ReadMessage.jsp?msgno=10001
|
|
http://www.example.com/ReadMessage.jsp?msgno=10002 |