CVE

Id
9174  
CVE No.
CVE-2004-0746  
Status
Candidate  
Description
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user"s HTTP session.  
Phase
Assigned (20040726)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
59903 9174 CVE-2004-0746 BUGTRAQ:20040823 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection  View
59904 9174 CVE-2004-0746 URL:http://marc.info/?l=bugtraq&m=109327681304401&w=2  View
59905 9174 CVE-2004-0746 CONFIRM:http://www.kde.org/info/security/advisory-20040823-1.txt  View
59906 9174 CVE-2004-0746 CONECTIVA:CLA-2004:864  View
59907 9174 CVE-2004-0746 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000864  View
59908 9174 CVE-2004-0746 MANDRAKE:MDKSA-2004:086  View
59909 9174 CVE-2004-0746 URL:http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:086  View
59910 9174 CVE-2004-0746 BID:10991  View
59911 9174 CVE-2004-0746 URL:http://www.securityfocus.com/bid/10991  View
59912 9174 CVE-2004-0746 OVAL:oval:org.mitre.oval:def:11281  View
59913 9174 CVE-2004-0746 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11281  View
59914 9174 CVE-2004-0746 SECUNIA:12341  View
59915 9174 CVE-2004-0746 URL:http://secunia.com/advisories/12341  View
59916 9174 CVE-2004-0746 XF:kde-konqueror-cookie-set(17063)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63044 JVNDB-2004-000386 Apache HTTP Server の 設定ファイルの解析処理におけるバッファオーバーフローの脆弱性 Apache HTTP Server には、httpd.conf もしくは .htaccess 設定ファイルに記述された特定の環境変数の取り扱いの不備により、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2004-0747 9174 4.6 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000386.html  View