|
|
CVE Reference: CVE-2004-1527 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2004-1527 |
|
|
Description: Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/18073 SAID Secunia Advisory: SA13208 MISC http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html BUGTRAQ http://marc.theaimsgroup.com/?l=bugtraq&m=110053968530613&w=2 BID 11680 |
|
| Return to the previous page. |
