Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-02-13T05:00:00
Updated: 2024-08-08T00:31:47.905Z
Reserved: 2004-09-14T00:00:00
Link: CVE-2004-0866
Vulnrichment
No data.
NVD
Status : Modified
Published: 2004-09-16T04:00:00.000
Modified: 2021-07-23T12:55:03.667
Link: CVE-2004-0866
Redhat
No data.