CVE-2004-0867

CWE-2643 documents3 sources
Severity
7.5HIGH
EPSS
3.6%
top 12.14%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
KDE KonquerorMicrosoft IEMicrosoft Internet Explorer+2 more
Timeline
PublishedDec 23
Latest updateApr 29

Description

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages5 packages

▶NVDmozilla/firefox0.9.2
▶NVDmicrosoft/ie6.0
▶NVDkde/konqueror18 versions+17
▶NVDsuse/suse_linux5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-rgv5-6h77-53xf: Mozilla Firefox 0↗2022-04-29
▶
CVEList
CVE-2004-0867: Mozilla Firefox 0↗2004-09-24
▶
CVE-2004-0867 (HIGH CVSS 7.5) | Mozilla Firefox 0.9.2 allows web si | cvebase.io