Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Konqueror跨域Cookie注入漏洞
Vulnerability Description
KDE是一款免费开放源代码X桌面管理程序。 KDE Konqueror浏览器不正确处理COOKIE信息，远程攻击者可以利用这个漏洞注入恶意数据到COOKIE中。 在受影响域下操作的WEB站点可以设置HTTP COOKIE，使Konqueror Web浏览器可以发送COOKIE信息到操作在相同域中其他WEB站点上。恶意WEB站点可以利用这个漏洞进行类似会话定置的攻击( http://www.acros.si/papers/session_fixation.pdf )。 此漏洞影响所有域第二级字符超过2个字符
CVSS Information
N/A
Vulnerability Type
N/A