CVE

Id
15888  
CVE No.
CVE-2005-4684  
Status
Candidate  
Description
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.  
Phase
Assigned (20060131)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
124891 15888 CVE-2005-4684 FULLDISC:20051104 Browser cookie handling: possible cross-domain cookie sharing  View
124892 15888 CVE-2005-4684 URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html  View
124893 15888 CVE-2005-4684 BID:15331  View
124894 15888 CVE-2005-4684 URL:http://www.securityfocus.com/bid/15331  View
124895 15888 CVE-2005-4684 XF:konqueror-cookie-information-disclosure(25291)  View

Related JVN