CVE Vulnerabilities

CVE-2004-0867

Published: Dec 23, 2004 | Modified: Jul 23, 2021
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a users HTTP session. NOTE: it was later reported that 2.x is also affected.

Affected Software

Name Vendor Start Version End Version
Konqueror Kde 2.2.1 2.2.1
Konqueror Kde 2.2.2 2.2.2
Konqueror Kde 3.1 3.1
Konqueror Kde 3.1.1 3.1.1
Konqueror Kde 3.1.2 3.1.2
Ie Microsoft 6.0 6.0
Ie Microsoft 6.0 6.0
Konqueror Kde 2.1.1 2.1.1
Konqueror Kde 2.1.2 2.1.2
Konqueror Kde 3.0.5 3.0.5
Konqueror Kde 3.0.5b 3.0.5b
Konqueror Kde 3.0.2 3.0.2
Konqueror Kde 3.0 3.0
Konqueror Kde 3.0.1 3.0.1
Konqueror Kde 3.0.3 3.0.3
Konqueror Kde 3.2.3 3.2.3
Konqueror Kde 3.1.3 3.1.3
Konqueror Kde 3.1.4 3.1.4
Konqueror Kde 3.2.1 3.2.1
Firefox Mozilla 0.9.2 0.9.2
Konqueror Kde 3.1.5 3.1.5
Internet_explorer Microsoft 6.0 6.0

References