Vulnerability in Kde Konqueror
CVE-2004-0867
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.
EPSS: 0.172 (96.8th percentile) — read the EPSS interpretation.
Affected products
- Kde Konqueror — versions 2.1.1, 2.1.2, 2.2.1
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 6.0
- Mozilla Firefox — versions 0.9.2
- Suse Suse_linux — versions 1.0, 8, 8.1
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)