Vulnerability CVE-2004-0746 - CERT Civis.Net

Vulnerability Name:

CVE-2004-0746 (CCN-17063)

Assigned:

2004-08-20

Published:

2004-08-20

Updated:

2017-10-11

Summary:

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Data Manipulation

References:

Source: MITRE
Type: CNA
CVE-2004-0746

Source: CONECTIVA
Type: UNKNOWN
CLA-2004:864

Source: CCN
Type: Conectiva Linux Security Announcement CLSA-2004:864
Fix for multiple security vulnerabilities

Source: BUGTRAQ
Type: UNKNOWN
20040823 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection

Source: CCN
Type: RHSA-2004-412
kdelibs

Source: CCN
Type: SA12341
Konqueror Cross-Domain Cookie Injection Vulnerability

Source: SECUNIA
Type: UNKNOWN
12341

Source: CCN
Type: Slackware Security Advisories Fri, 3 Sep 2004 22:01:35 -0700 (PDT)
[slackware-security] kde (SSA:2004-247-01)

Source: CCN
Type: GLSA-200408-23
kdelibs: Cross-domain cookie injection vulnerability

Source: CCN
Type: KDE Security Advisory 20040823-1 KDE Security Advisory 20040823-1
Konqueror Cross-Domain Cookie Injection

Source: CONFIRM
Type: UNKNOWN
http://www.kde.org/info/security/advisory-20040823-1.txt

Source: MANDRAKE
Type: UNKNOWN
MDKSA-2004:086

Source: BID
Type: Patch, Vendor Advisory
10991

Source: CCN
Type: BID-10991
KDE Konqueror Cookie Domain Validation Vulnerability

Source: CCN
Type: BID-11186
Multiple Browser Cross-Domain Cookie Injection Vulnerability

Source: XF
Type: UNKNOWN
kde-konqueror-cookie-set(17063)

Source: XF
Type: UNKNOWN
kde-konqueror-cookie-set(17063)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:11281

Source: SUSE
Type: SUSE-SA:2004:035
samba: remote file disclosure

Vulnerable Configuration:

Configuration 1:

cpe:/a:kde:konqueror:3.0:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.0.1:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.0.2:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.0.3:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.0.5:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.0.5b:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.1:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.1.1:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.1.2:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.1.3:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.1.5:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.2.1:*:*:*:*:*:*:*

OR cpe:/a:kde:konqueror:3.2.3:*:*:*:*:*:*:*

Configuration 2:

cpe:/o:gentoo:linux:1.4:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.1.3:*:*:*:*:*:*:*

OR cpe:/o:kde:kde:3.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:amd64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:amd64:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8:*:enterprise_server:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.1:*:*:*:*:*:*:*

Configuration RedHat 1:

cpe:/o:redhat:enterprise_linux:*:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/o:kde:kde:3.2.3:*:*:*:*:*:*:*

AND

cpe:/o:gentoo:linux:*:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.1:*:*:*:*:*:*:*

OR cpe:/o:suse:linux_enterprise_server:8:*:*:*:*:*:*:*

OR cpe:/o:slackware:slackware_linux:current:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:as:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:2.1:*:ws:*:*:*:*:*

OR cpe:/o:suse:suse_linux:8.2:*:*:*:*:*:*:*

OR cpe:/o:conectiva:linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*

OR cpe:/o:suse:suse_linux:9.0:*:*:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::ws:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::es:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::as:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:enterprise_linux:3::desktop:*:*:*:*:*

OR cpe:/o:conectiva:linux:10:*:*:*:*:*:*:*

OR cpe:/o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*

OR cpe:/o:redhat:linux_advanced_workstation:2.1::itanium:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64:*:*:*:*:*

OR cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.mitre.oval:def:11281	V	Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.	2013-04-29
oval:com.redhat.rhsa:def:20040412	P	RHSA-2004:412: kdelibs, kdebase security update (Moderate)	2004-10-05