Lucene search

[email protected]CVE-2004-0867

HistoryDec 23, 2004 - 5:00 a.m.

CVE-2004-0867

2004-12-2305:00:00

CWE-264

[email protected]

web.nvd.nist.gov

mozilla

firefox

0.9.2

session fixation

security vulnerability

nvd

cve-2004-0867

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user’s HTTP session. NOTE: it was later reported that 2.x is also affected.

Affected configurations

NVD

Node

kdekonquerorMatch2.1.1

kdekonquerorMatch2.1.2

kdekonquerorMatch2.2.1

kdekonquerorMatch2.2.2

kdekonquerorMatch3.0

kdekonquerorMatch3.0.1

kdekonquerorMatch3.0.2

kdekonquerorMatch3.0.3

kdekonquerorMatch3.0.5

kdekonquerorMatch3.0.5b

kdekonquerorMatch3.1

kdekonquerorMatch3.1.1

kdekonquerorMatch3.1.2

kdekonquerorMatch3.1.3

kdekonquerorMatch3.1.4

kdekonquerorMatch3.1.5

kdekonquerorMatch3.2.1

kdekonquerorMatch3.2.3

microsoftieMatch6.0sp1

microsoftieMatch6.0sp2

microsoftinternet_explorerMatch6.0

mozillafirefoxMatch0.9.2

Node

susesuse_linuxMatch1.0desktop

susesuse_linuxMatch8enterprise_server

susesuse_linuxMatch8.1

susesuse_linuxMatch8.2

susesuse_linuxMatch9.0

CPENameOperatorVersion
kde:konquerorkde konqueroreq2.1.1
kde:konquerorkde konqueroreq2.1.2
kde:konquerorkde konqueroreq2.2.1
kde:konquerorkde konqueroreq2.2.2
kde:konquerorkde konqueroreq3.0
kde:konquerorkde konqueroreq3.0.1
kde:konquerorkde konqueroreq3.0.2
kde:konquerorkde konqueroreq3.0.3
kde:konquerorkde konqueroreq3.0.5
kde:konquerorkde konqueroreq3.0.5b

CPE	Name	Operator	Version
kde:konqueror	kde konqueror	eq	2.1.1
kde:konqueror	kde konqueror	eq	2.1.2
kde:konqueror	kde konqueror	eq	2.2.1
kde:konqueror	kde konqueror	eq	2.2.2
kde:konqueror	kde konqueror	eq	3.0
kde:konqueror	kde konqueror	eq	3.0.1
kde:konqueror	kde konqueror	eq	3.0.2
kde:konqueror	kde konqueror	eq	3.0.3
kde:konqueror	kde konqueror	eq	3.0.5
kde:konqueror	kde konqueror	eq	3.0.5b

Rows per page:

1-10 of 211

References

kuza55.blogspot.com/2008/02/understanding-cookie-security.html

marc.info/?l=bugtraq&m=109536612321898&w=2

secunia.com/advisories/12580/

securitytracker.com/id?1011331

www.securityfocus.com/bid/11186

bugzilla.mozilla.org/show_bug.cgi?id=252342

exchange.xforce.ibmcloud.com/vulnerabilities/17415

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.7%

JSON

Related for CVE-2004-0867

cvelist2 nvd2 cve1 prion1 nessus1 securityvulns1