Lucene search
HistoryApr 15, 2004 - 4:00 a.m.
CVE-2003-0593
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.021
Percentile
89.2%
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via “%2e%2e” (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected configurations
Node
operaopera_browserMatch5.0
ORoperaopera_browserMatch5.02
ORoperaopera_browserMatch5.10
ORoperaopera_browserMatch5.11
ORoperaopera_browserMatch5.12
ORoperaopera_browserMatch6.0
ORoperaopera_browserMatch6.01
ORoperaopera_browserMatch6.02
ORoperaopera_browserMatch6.03
ORoperaopera_browserMatch6.04
ORoperaopera_browserMatch6.05
ORoperaopera_browserMatch6.06
ORoperaopera_browserMatch6.10
ORoperaopera_browserMatch7.0
ORoperaopera_browserMatch7.0beta1
ORoperaopera_browserMatch7.0beta2
ORoperaopera_browserMatch7.01
ORoperaopera_browserMatch7.02
ORoperaopera_browserMatch7.03
ORoperaopera_browserMatch7.10
ORoperaopera_browserMatch7.11
ORoperaopera_browserMatch7.20
ORoperaopera_browserMatch7.21
ORoperaopera_browserMatch7.22
ORoperaopera_browserMatch7.23
| Vendor | Product | Version | CPE |
|---|---|---|---|
| opera | opera_browser | 5.0 | cpe:2.3:a:opera:opera_browser:5.0:*:*:*:*:*:*:* |
| opera | opera_browser | 5.02 | cpe:2.3:a:opera:opera_browser:5.02:*:*:*:*:*:*:* |
| opera | opera_browser | 5.10 | cpe:2.3:a:opera:opera_browser:5.10:*:*:*:*:*:*:* |
| opera | opera_browser | 5.11 | cpe:2.3:a:opera:opera_browser:5.11:*:*:*:*:*:*:* |
| opera | opera_browser | 5.12 | cpe:2.3:a:opera:opera_browser:5.12:*:*:*:*:*:*:* |
| opera | opera_browser | 6.0 | cpe:2.3:a:opera:opera_browser:6.0:*:*:*:*:*:*:* |
| opera | opera_browser | 6.01 | cpe:2.3:a:opera:opera_browser:6.01:*:*:*:*:*:*:* |
| opera | opera_browser | 6.02 | cpe:2.3:a:opera:opera_browser:6.02:*:*:*:*:*:*:* |
| opera | opera_browser | 6.03 | cpe:2.3:a:opera:opera_browser:6.03:*:*:*:*:*:*:* |
| opera | opera_browser | 6.04 | cpe:2.3:a:opera:opera_browser:6.04:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2003-0593
2004-04-15 04:00:00
cvelist
cvelist
CVE-2003-0593
2004-03-16 05:00:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.021
Percentile
89.2%
Related for NVD:CVE-2003-0593