Vulnerability in Kde Konqueror

CVE-2004-0866

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

EPSS: 0.101 (95.1th percentile) — read the EPSS interpretation.

Affected products

Kde Konqueror — versions 2.1.1, 2.1.2, 2.2.1
Microsoft Ie — versions 6.0
Microsoft Internet_explorer — versions 6.0
Mozilla Firefox — versions 0.9.2
Suse Suse_linux — versions 1.0, 8, 8.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Patch, vdb-entry, x_refsource_BID, Vendor Advisory)