Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2004-09-14T04:00:00
Updated: 2024-08-08T00:31:46.647Z
Reserved: 2004-07-26T00:00:00
Link: CVE-2004-0746
Vulnrichment
No data.
NVD
Status : Modified
Published: 2004-10-20T04:00:00.000
Modified: 2017-10-11T01:29:31.840
Link: CVE-2004-0746
Redhat