NVD

Id
80144  
Name
CVE-2002-1152  
Description
Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-10-11  
Modified Date
2016-10-17  
Seq
2002-1152  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
399496 80144 CVE-2002-1152 20020910 KDE Security Advisory: Secure Cookie Vulnerability  View
399497 80144 CVE-2002-1152 kde-konqueror-cookie-hijacking(10083)  View
399498 80144 CVE-2002-1152 http://www.kde.org/info/security/advisory-20020908-1.txt  View
399499 80144 CVE-2002-1152 RHSA-2002:220  View
399500 80144 CVE-2002-1152 5691  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63970 JVNDB-2002-000297 KDE の Konqueror における cookie が取得される脆弱性 ------------ CVE-2002-1152 5539 CVE-2002-1152 80144 7.5 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000297.html 2002-12-04 2007-04-01 View