Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-03-16T05:00:00

Updated: 2024-08-08T01:58:11.111Z

Reserved: 2003-07-18T00:00:00

Link: CVE-2003-0592

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-04-15T04:00:00.000

Modified: 2017-10-11T01:29:11.980

Link: CVE-2003-0592

cve-icon Redhat

Severity : Important

Publid Date: 2004-03-10T00:00:00Z

Links: CVE-2003-0592 - Bugzilla