info
discussion
exploit
solution
references
Allaire JRun Duplicate Session ID Vulnerability
There is no exploit required.
Privacy Statement
Copyright 2010, SecurityFocus