CVE

Id
9295  
CVE No.
CVE-2004-0867  
Status
Candidate  
Description
Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user"s HTTP session. NOTE: it was later reported that 2.x is also affected.  
Phase
Assigned (20040914)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
61580 9295 CVE-2004-0867 BUGTRAQ:20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities  View
61581 9295 CVE-2004-0867 URL:http://marc.info/?l=bugtraq&m=109536612321898&w=2  View
61582 9295 CVE-2004-0867 MISC:http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html  View
61583 9295 CVE-2004-0867 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=252342  View
61584 9295 CVE-2004-0867 BID:11186  View
61585 9295 CVE-2004-0867 URL:http://www.securityfocus.com/bid/11186  View
61586 9295 CVE-2004-0867 SECTRACK:1011331  View
61587 9295 CVE-2004-0867 URL:http://securitytracker.com/id?1011331  View
61588 9295 CVE-2004-0867 SECUNIA:12580  View
61589 9295 CVE-2004-0867 URL:http://secunia.com/advisories/12580/  View
61590 9295 CVE-2004-0867 XF:web-browser-session-hijack(17415)  View

Related JVN