A security issue has been reported in BluePex IE-2000, which can be exploited by malicious people to hijack user sessions.

The security issue is caused due to an error within the session management, which can be exploited to access e.g. the webmail interface with privileges of a logged in user.

Successful exploitation requires that the attacker uses the same IP address as the logged in user.

Solution
Security Patches have reportedly been issued.

Provided and/or discovered by
GSEC Security Solutions

Original Advisory
http://www.gsec.com.br/GSEC-2008001-en.txt

Deep Links
Links available in Customer Area