Secunia

A security issue has been reported in futomi's CGI Cafe Analysis of High-Performance Access CGI, which can be exploited by malicious people to hijack a user session

The security issue is caused due to the application not generating truly random session identifiers. This can be exploited to hijack a user's session by guessing a valid session identifier value.

This security issue is reported in versions 4.0.1 and prior.

Solution
Update to version 4.0.2.

Provided and/or discovered by
Reported via JVN.

Changelog
Further details available in Customer Area

Original Advisory
JVN:
http://jvn.jp/jp/JVN07468800/index.html

futomi's CGI Cafe:
http://www.futomi.com/library/accs.html

Deep Links
Links available in Customer Area