Evil-DB LogoEvil-DB
← All CVEs

CVE-2004-0867

high · 7.5

Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

7.5
CVSS
17.2%
EPSS (exploit prob.)
97th
EPSS percentile
2004-12-23
Published

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE-264

Affected products

VendorProductAffected versions
kdekonqueror2.1.1
kdekonqueror2.1.2
kdekonqueror2.2.1
kdekonqueror2.2.2
kdekonqueror3.0
kdekonqueror3.0.1
kdekonqueror3.0.2
kdekonqueror3.0.3
kdekonqueror3.0.5
kdekonqueror3.0.5b
kdekonqueror3.1
kdekonqueror3.1.1
kdekonqueror3.1.2
kdekonqueror3.1.3
kdekonqueror3.1.4
kdekonqueror3.1.5
kdekonqueror3.2.1
kdekonqueror3.2.3
microsoftie6.0
microsoftie6.0
microsoftinternet_explorer6.0
mozillafirefox0.9.2
susesuse_linux1.0
susesuse_linux8
susesuse_linux8.1
susesuse_linux8.2
susesuse_linux9.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0867