EDB-33767

functional

Novell eDirectory 8.8.5 - DHost Weak Session Cookie Session Hijacking (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2010-03-14catalog exploit_db

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2009-4655US	high7.5	50.5% (99th)	Exploit	2010-02-26
The dhost web service in Novell eDirectory 8.8.5 uses a predictable session cookie, which makes it easier for remote attackers to hijack sessions via a modified cookie.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.