CVE

Id
6696  
CVE No.
CVE-2002-2314  
Status
Candidate  
Description
Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading "//" and ending in a newline, which causes the host/path check to fail.  
Phase
Assigned (20071026)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
37966 6696 CVE-2002-2314 BUGTRAQ:20020724 Mozilla cookie stealing - Sandblad advisory #9  View
37967 6696 CVE-2002-2314 URL:http://seclists.org/bugtraq/2002/Jul/0260.html  View
37968 6696 CVE-2002-2314 BUGTRAQ:20020918 Mozilla vulnerabilities, an update  View
37969 6696 CVE-2002-2314 URL:http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html  View
37970 6696 CVE-2002-2314 MISC:http://bugzilla.mozilla.org/show_bug.cgi?id=152725  View
37971 6696 CVE-2002-2314 CONFIRM:http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html  View
37972 6696 CVE-2002-2314 MANDRAKE:MDKSA-2002:074  View
37973 6696 CVE-2002-2314 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:074  View
37974 6696 CVE-2002-2314 BID:5293  View
37975 6696 CVE-2002-2314 URL:http://www.securityfocus.com/bid/5293  View
37976 6696 CVE-2002-2314 XF:mozilla-javascript-steal-cookies(9656)  View

Related JVN