Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2004-03-16T05:00:00
Updated: 2024-08-08T01:58:11.111Z
Reserved: 2003-07-18T00:00:00
Link: CVE-2003-0592
Vulnrichment
No data.
NVD
Status : Modified
Published: 2004-04-15T04:00:00.000
Modified: 2017-10-11T01:29:11.980
Link: CVE-2003-0592
Redhat