6.4

CVE-2005-4684

Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Kde ≫ Konqueror Version0.1 Editionembedded
Kde ≫ Konqueror Version2.1.1
Kde ≫ Konqueror Version2.1.2
Kde ≫ Konqueror Version2.2.1
Kde ≫ Konqueror Version2.2.2
Kde ≫ Konqueror Version3.0
Kde ≫ Konqueror Version3.0.1
Kde ≫ Konqueror Version3.0.2
Kde ≫ Konqueror Version3.0.3
Kde ≫ Konqueror Version3.0.5
Kde ≫ Konqueror Version3.0.5b
Kde ≫ Konqueror Version3.1
Kde ≫ Konqueror Version3.1.1
Kde ≫ Konqueror Version3.1.2
Kde ≫ Konqueror Version3.1.3
Kde ≫ Konqueror Version3.1.4
Kde ≫ Konqueror Version3.1.5
Kde ≫ Konqueror Version3.2.1
Kde ≫ Konqueror Version3.2.2.6
Kde ≫ Konqueror Version3.2.3
Kde ≫ Konqueror Version3.3
Kde ≫ Konqueror Version3.3.1
Kde ≫ Konqueror Version3.3.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.34% 0.534
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N