CVE-2003-1492 Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mozilla Firefox | All versions | No fix listed |
| netscape navigator | = 7.0.2 | No fix listed |
References
- 20030429 "netscape navigator" is cracked. exploit mailing-list
- 7456 exploit vdb-entry
- netscape-domain-obtain-info(11924) vdb-entry