Detections
Analytics

Novell eDirectory DHost Predictable Session ID

high Nessus Plugin ID 45109

Language:

Synopsis

The remote web server generates predictable session IDs.

Description

The eDirectory DHost web server running on the remote host generates predictable session IDs.

A remote attacker could exploit this by predicting the session ID of a legitimately logged-in user, which could lead to the hijacking of administrative sessions.

Solution

There is no known solution at this time.

Plugin Details

Severity: High

ID: 45109

File Name: edir_dhost_predictable_ids.nasl

Version: 1.9

Type: remote

Family: Web Servers

Published: 3/19/2010

Updated: 7/10/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

CPE: cpe:/a:novell:edirectory

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 11/13/2009

Reference Information

CVE: CVE-2009-4655

BID: 38782

CWE: 310

Secunia: 38808