Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
多个厂商Web浏览器Cookie主机名处理漏洞
Vulnerability Description
在DNS解析器的搜索列表中带有非root域时，Konqueror可以关联带有多个域的cookie，远程攻击者可以借此哄骗用户接受一个通过由用户输入的主机名的搜索列扩展而形成的主机名或者窃取一个已扩展主机名的cookie，如一个运营ap1.com互联网网站的攻击者窃取与ap1.com.example.com内联网网站相关的cookie。
CVSS Information
N/A
Vulnerability Type
N/A