Lucene search
MitreCVE-2004-0866HistoryFeb 13, 2005 - 5:00 a.m.
CVE-2004-0866
2005-02-1305:00:00
mitre
web.nvd.nist.gov
41
cve
2004
0866
internet explorer
session hijack
vulnerability
nvd
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
High
EPSS
0.006
Percentile
77.6%
Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user’s HTTP session.
Affected configurations
Node
kdekonquerorMatch2.1.1
ORkdekonquerorMatch2.1.2
ORkdekonquerorMatch2.2.1
ORkdekonquerorMatch2.2.2
ORkdekonquerorMatch3.0
ORkdekonquerorMatch3.0.1
ORkdekonquerorMatch3.0.2
ORkdekonquerorMatch3.0.3
ORkdekonquerorMatch3.0.5
ORkdekonquerorMatch3.0.5b
ORkdekonquerorMatch3.1
ORkdekonquerorMatch3.1.1
ORkdekonquerorMatch3.1.2
ORkdekonquerorMatch3.1.3
ORkdekonquerorMatch3.1.4
ORkdekonquerorMatch3.1.5
ORkdekonquerorMatch3.2.1
ORkdekonquerorMatch3.2.3
ORmicrosoftieMatch6.0sp1
ORmicrosoftieMatch6.0sp2
ORmicrosoftinternet_explorerMatch6.0
ORmozillafirefoxMatch0.9.2
Node
susesuse_linuxMatch1.0desktop
ORsusesuse_linuxMatch8enterprise_server
ORsusesuse_linuxMatch8.1
ORsusesuse_linuxMatch8.2
ORsusesuse_linuxMatch9.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| kde | konqueror | 2.1.1 | cpe:2.3:a:kde:konqueror:2.1.1:*:*:*:*:*:*:* |
| kde | konqueror | 2.1.2 | cpe:2.3:a:kde:konqueror:2.1.2:*:*:*:*:*:*:* |
| kde | konqueror | 2.2.1 | cpe:2.3:a:kde:konqueror:2.2.1:*:*:*:*:*:*:* |
| kde | konqueror | 2.2.2 | cpe:2.3:a:kde:konqueror:2.2.2:*:*:*:*:*:*:* |
| kde | konqueror | 3.0 | cpe:2.3:a:kde:konqueror:3.0:*:*:*:*:*:*:* |
| kde | konqueror | 3.0.1 | cpe:2.3:a:kde:konqueror:3.0.1:*:*:*:*:*:*:* |
| kde | konqueror | 3.0.2 | cpe:2.3:a:kde:konqueror:3.0.2:*:*:*:*:*:*:* |
| kde | konqueror | 3.0.3 | cpe:2.3:a:kde:konqueror:3.0.3:*:*:*:*:*:*:* |
| kde | konqueror | 3.0.5 | cpe:2.3:a:kde:konqueror:3.0.5:*:*:*:*:*:*:* |
| kde | konqueror | 3.0.5b | cpe:2.3:a:kde:konqueror:3.0.5b:*:*:*:*:*:*:* |
Related
nvd
nvd
cvelist
cvelist
cve
cve
prion
prion
Cross site scripting
2008-07-14 23:41:00
Cross site scripting
2008-07-14 23:41:00
nessus
nessus
RHEL 2.1 / 3 : kdelibs, kdebase (RHSA-2004:412)
2004-10-06 00:00:00
securityvulns
securityvulns
wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities
2004-09-17 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
High
EPSS
0.006
Percentile
77.6%
Related for CVE-2004-0866