Lucene search

[email protected]CVE-2002-1126

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1126

2004-09-0104:00:00

[email protected]

web.nvd.nist.gov

mozilla

netscape

galeon

document referrer

web browsers

security vulnerability

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.

Affected configurations

NVD

Node

galeongaleon_browserMatch1.2.4

galeongaleon_browserMatch1.2.5

galeongaleon_browserMatch1.2.6

mozillamozillaMatch0.9.3

mozillamozillaMatch0.9.4

mozillamozillaMatch0.9.5

mozillamozillaMatch0.9.6

mozillamozillaMatch0.9.7

mozillamozillaMatch0.9.8

mozillamozillaMatch0.9.9

mozillamozillaMatch1.0.1

mozillamozillaMatch1.1

CPENameOperatorVersion
galeon:galeon_browsergaleon galeon browsereq1.2.4
galeon:galeon_browsergaleon galeon browsereq1.2.5
galeon:galeon_browsergaleon galeon browsereq1.2.6
mozilla:mozillamozillaeq0.9.3
mozilla:mozillamozillaeq0.9.4
mozilla:mozillamozillaeq0.9.5
mozilla:mozillamozillaeq0.9.6
mozilla:mozillamozillaeq0.9.7
mozilla:mozillamozillaeq0.9.8
mozilla:mozillamozillaeq0.9.9

CPE	Name	Operator	Version
galeon:galeon_browser	galeon galeon browser	eq	1.2.4
galeon:galeon_browser	galeon galeon browser	eq	1.2.5
galeon:galeon_browser	galeon galeon browser	eq	1.2.6
mozilla:mozilla	mozilla	eq	0.9.3
mozilla:mozilla	mozilla	eq	0.9.4
mozilla:mozilla	mozilla	eq	0.9.5
mozilla:mozilla	mozilla	eq	0.9.6
mozilla:mozilla	mozilla	eq	0.9.7
mozilla:mozilla	mozilla	eq	0.9.8
mozilla:mozilla	mozilla	eq	0.9.9

Rows per page:

1-10 of 121

References

bugzilla.mozilla.org/show_bug.cgi?id=145579

marc.info/?l=bugtraq&m=103176760004720&w=2

www.iss.net/security_center/static/10084.php

www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075

www.redhat.com/support/errata/RHSA-2002-192.html

www.redhat.com/support/errata/RHSA-2003-046.html

www.securityfocus.com/bid/5694

2.6 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

69.7%

JSON

Related for CVE-2002-1126

cvelist1 nvd1 nessus3