Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2004-09-24T04:00:00

Updated: 2024-08-08T00:31:47.980Z

Reserved: 2004-09-14T00:00:00

Link: CVE-2004-0867

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2004-12-23T05:00:00.000

Modified: 2024-11-20T23:49:34.703

Link: CVE-2004-0867

cve-icon Redhat

No data.