Lucene search

MitreCVE-2003-0594

HistoryApr 15, 2004 - 4:00 a.m.

CVE-2003-0594

2004-04-1504:00:00

mitre

web.nvd.nist.gov

mozilla

remote attackers

cookie restrictions

directory traversal

url

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.5

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via “%2e%2e” (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.

Affected configurations

Nvd

Node

mozillamozillaMatch1.0

mozillamozillaMatch1.0rc1

mozillamozillaMatch1.0rc2

mozillamozillaMatch1.0.1

mozillamozillaMatch1.0.2

mozillamozillaMatch1.1

mozillamozillaMatch1.1alpha

mozillamozillaMatch1.1beta

mozillamozillaMatch1.2

mozillamozillaMatch1.2alpha

mozillamozillaMatch1.2beta

mozillamozillaMatch1.2.1

mozillamozillaMatch1.3

mozillamozillaMatch1.3.1

mozillamozillaMatch1.4

mozillamozillaMatch1.4.1

mozillamozillaMatch1.4.2

VendorProductVersionCPE
mozillamozilla1.0cpe:2.3:a:mozilla:mozilla:1.0:*:*:*:*:*:*:*
mozillamozilla1.0cpe:2.3:a:mozilla:mozilla:1.0:rc1:*:*:*:*:*:*
mozillamozilla1.0cpe:2.3:a:mozilla:mozilla:1.0:rc2:*:*:*:*:*:*
mozillamozilla1.0.1cpe:2.3:a:mozilla:mozilla:1.0.1:*:*:*:*:*:*:*
mozillamozilla1.0.2cpe:2.3:a:mozilla:mozilla:1.0.2:*:*:*:*:*:*:*
mozillamozilla1.1cpe:2.3:a:mozilla:mozilla:1.1:*:*:*:*:*:*:*
mozillamozilla1.1cpe:2.3:a:mozilla:mozilla:1.1:alpha:*:*:*:*:*:*
mozillamozilla1.1cpe:2.3:a:mozilla:mozilla:1.1:beta:*:*:*:*:*:*
mozillamozilla1.2cpe:2.3:a:mozilla:mozilla:1.2:*:*:*:*:*:*:*
mozillamozilla1.2cpe:2.3:a:mozilla:mozilla:1.2:alpha:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	mozilla	1.0	cpe:2.3:a:mozilla:mozilla:1.0:::::::*
mozilla	mozilla	1.0	cpe:2.3:a:mozilla:mozilla:1.0:rc1::::::
mozilla	mozilla	1.0	cpe:2.3:a:mozilla:mozilla:1.0:rc2::::::
mozilla	mozilla	1.0.1	cpe:2.3:a:mozilla:mozilla:1.0.1:::::::*
mozilla	mozilla	1.0.2	cpe:2.3:a:mozilla:mozilla:1.0.2:::::::*
mozilla	mozilla	1.1	cpe:2.3:a:mozilla:mozilla:1.1:::::::*
mozilla	mozilla	1.1	cpe:2.3:a:mozilla:mozilla:1.1:alpha::::::
mozilla	mozilla	1.1	cpe:2.3:a:mozilla:mozilla:1.1:beta::::::
mozilla	mozilla	1.2	cpe:2.3:a:mozilla:mozilla:1.2:::::::*
mozilla	mozilla	1.2	cpe:2.3:a:mozilla:mozilla:1.2:alpha::::::

Rows per page:

1-10 of 171

References

archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html

lists.grok.org.uk/pipermail/full-disclosure/2004-March/018475.html

www.mandriva.com/security/advisories?name=MDKSA-2004:021

www.redhat.com/support/errata/RHSA-2004-112.html

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A873

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A917

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9826

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

9.5

Confidence

High

EPSS

0.011

Percentile

84.8%

JSON

Related for CVE-2003-0594