CVE:CVE-2004-2766
CNNVD:CNNVD-201001-270
Sun ONE Messaging Server 6.1 和 iPlanet Messaging Server 5.2hf2.02以前的5.2版本中的Webmail允许远程攻击者借助电子邮件信息获得对电子邮件的未明"访问权"。该漏洞与"会话劫持" 问题相关, 且不同于CVE-2005-2022 和 CVE-2006-5486。
solution:Upgrade sun iplanet_messaging_server to a higher version than 5.2,and avoid the version 5.2; Upgrade sun one_messaging_server to a higher version than 6.1,and avoid the version 6.1