CVE-2004-0866

Internet Explorer 6.0 - Session Fixation

Title source: llm
STIX 2.1

Description

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=109536612321898&w=2
Vendor Advisory vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1011332
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/17415
Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11186

Scores

EPSS 0.0354
EPSS Percentile 87.8%

Details

Status published
Products (26)
kde/konqueror 2.1.1
kde/konqueror 2.1.2
kde/konqueror 2.2.1
kde/konqueror 2.2.2
kde/konqueror 3.0
kde/konqueror 3.0.1
kde/konqueror 3.0.2
kde/konqueror 3.0.3
kde/konqueror 3.0.5
kde/konqueror 3.0.5b
... and 16 more
Published Sep 16, 2004
Tracked Since Feb 18, 2026