CVE-2002-2013

State: Published
Severity: Not scored
Published: Jul 14, 2005
Updated: Sep 16, 2024
Reserved: Jul 14, 2005

Description

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

3925vdb-entry
20020121 Mozilla Cookie Exploitmailing-list
mozilla-netscape-steal-cookies(7973)vdb-entry
http://alive.znep.com/~marcs/security/mozillacookie/demo.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.