Oval Definition:oval:org.mitre.oval:def:873
Revision Date:2007-04-25Version:18
Title:Red Hat Mozilla Bypass Cookie Access Restrictions Vulnerability
Description:Mozilla allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Mozilla to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Family:unixClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2003-0594
Platform(s):Red Hat Linux 9
Product(s):mozilla
Definition Synopsis
  • Software section
  • Red Hat 9 is installed
  • AND ix86 architecture
  • AND mozilla version is less than 1.4.2-0.9.0
  • AND Configuration section
  • /usr/bin/mozilla is executable
  • /usr/bin/mozilla is executable
  • OR /usr/bin/mozilla is executable
  • OR /usr/bin/mozilla is executable
  • BACK