5

CVE-2002-2013

Exploit

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Data is provided by the National Vulnerability Database (NVD)
Mozilla ≫ Mozilla Version0.9.2
Mozilla ≫ Mozilla Version0.9.2.1
Mozilla ≫ Mozilla Version0.9.3
Mozilla ≫ Mozilla Version0.9.4
Mozilla ≫ Mozilla Version0.9.4.1
Mozilla ≫ Mozilla Version0.9.5
Mozilla ≫ Mozilla Version0.9.6
Netscape ≫ Communicator Version4.0
Netscape ≫ Communicator Version4.4
Netscape ≫ Communicator Version4.5
Netscape ≫ Communicator Version4.5_beta
Netscape ≫ Communicator Version4.06
Netscape ≫ Communicator Version4.6
Netscape ≫ Communicator Version4.07
Netscape ≫ Communicator Version4.7
Netscape ≫ Communicator Version4.08
Netscape ≫ Communicator Version4.51
Netscape ≫ Communicator Version4.61
Netscape ≫ Communicator Version4.72
Netscape ≫ Communicator Version4.73
Netscape ≫ Communicator Version4.74
Netscape ≫ Communicator Version4.75
Netscape ≫ Communicator Version4.76
Netscape ≫ Communicator Version4.77
Netscape ≫ Communicator Version4.78
Netscape ≫ Navigator Version4.77
Netscape ≫ Navigator Version6.0
Netscape ≫ Navigator Version6.01
Netscape ≫ Navigator Version6.1
Netscape ≫ Navigator Version6.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.48% 0.621
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N