CVE

Id
5538  
CVE No.
CVE-2002-1151  
Status
Entry  
Description
The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames and sub-iframes, which can allow remote attackers to execute script and steal cookies from subframes that are in other domains.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
30085 5538 CVE-2002-1151 BUGTRAQ:20020910 KDE Security Advisory: Konqueror Cross Site Scripting Vulnerability  View
30086 5538 CVE-2002-1151 URL:http://marc.info/?l=bugtraq&m=103175850925395&w=2  View
30087 5538 CVE-2002-1151 CONFIRM:http://www.kde.org/info/security/advisory-20020908-2.txt  View
30088 5538 CVE-2002-1151 CALDERA:CSSA-2002-047.0  View
30089 5538 CVE-2002-1151 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2002-047.0.txt  View
30090 5538 CVE-2002-1151 CONECTIVA:CLA-2002:525  View
30091 5538 CVE-2002-1151 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000525  View
30092 5538 CVE-2002-1151 DEBIAN:DSA-167  View
30093 5538 CVE-2002-1151 URL:http://www.debian.org/security/2002/dsa-167  View
30094 5538 CVE-2002-1151 MANDRAKE:MDKSA-2002:064  View
30095 5538 CVE-2002-1151 URL:http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-064.php  View
30096 5538 CVE-2002-1151 REDHAT:RHSA-2002:220  View
30097 5538 CVE-2002-1151 URL:http://www.redhat.com/support/errata/RHSA-2002-220.html  View
30098 5538 CVE-2002-1151 REDHAT:RHSA-2002:221  View
30099 5538 CVE-2002-1151 URL:http://www.redhat.com/support/errata/RHSA-2002-221.html  View
30100 5538 CVE-2002-1151 BID:5689  View
30101 5538 CVE-2002-1151 URL:http://www.securityfocus.com/bid/5689  View
30102 5538 CVE-2002-1151 XF:ie-sameoriginpolicy-bypass(10039)  View
30103 5538 CVE-2002-1151 URL:http://www.iss.net/security_center/static/10039.php  View
30104 5538 CVE-2002-1151 OSVDB:7867  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63969 JVNDB-2002-000296 KDE の Konqueror における任意のスクリプトを実行される脆弱性 ------------ CVE-2002-1151 5538 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000296.html  View