NVD

Id
73712  
Name
CVE-2003-0594  
Description
Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2004-04-15  
Modified Date
2010-08-21  
Seq
2003-0594  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
379210 73712 CVE-2003-0594 20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue  View
379211 73712 CVE-2003-0594 20040310 Corsaire Security Advisory: Multiple vendor HTTP user agent cookie path traversal issue  View
379212 73712 CVE-2003-0594 oval:org.mitre.oval:def:873  View
379213 73712 CVE-2003-0594 oval:org.mitre.oval:def:917  View
379214 73712 CVE-2003-0594 oval:org.mitre.oval:def:9826  View
379215 73712 CVE-2003-0594 MDKSA-2004:021  View
379216 73712 CVE-2003-0594 RHSA-2004:112  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62734 JVNDB-2004-000075 Mozilla における cookie のアクセス制御を回避される脆弱性 ------------ CVE-2003-0594 7420 CVE-2003-0594 73712 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000075.html 2004-03-10 2007-04-01 View