CVEvulnerability
CVE-2002-2013
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Affected configurations
• mozilla mozilla 0.9.2
• mozilla mozilla 0.9.2.1
• mozilla mozilla 0.9.3
• mozilla mozilla 0.9.4
• mozilla mozilla 0.9.4.1
• mozilla mozilla 0.9.5
• mozilla mozilla 0.9.6
• netscape communicator 4.0
• netscape communicator 4.4
• netscape communicator 4.5
• netscape communicator 4.5 beta
• netscape communicator 4.06
• netscape communicator 4.6
• netscape communicator 4.07
• netscape communicator 4.7
• netscape communicator 4.08
• netscape communicator 4.51
• netscape communicator 4.61
• netscape communicator 4.72
• netscape communicator 4.73
• netscape communicator 4.74
• netscape communicator 4.75
• netscape communicator 4.76
• netscape communicator 4.77
• netscape communicator 4.78
• netscape navigator 4.77
• netscape navigator 6.0
• netscape navigator 6.01
• netscape navigator 6.1
• netscape navigator 6.2
References
- http://alive.znep.com/~marcs/security/mozillacookie/demo.html Exploit
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html Exploit
- http://www.iss.net/security_center/static/7973.php Patch
- http://www.securityfocus.com/bid/3925 Patch
- http://alive.znep.com/~marcs/security/mozillacookie/demo.html Exploit
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html Exploit
- http://www.iss.net/security_center/static/7973.php Patch
- http://www.securityfocus.com/bid/3925 Patch