CVE-2003-0592
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Konqueror en KDE 3.1.3 y anteriores (kdelibs) permite a atacantes remotos saltarse las restriciones de cookies pretendidas en una aplicación web mediante secuencias de atravesamiento de directorios "%2e%2e" (punto punto codificado) en una URL, lo que hace que Konqueror envíe la cookie fuera de los subconjuntos de URL especificados, por ejemplo a una aplicación vulnerable que corre en el mismo servidor que la aplicación objetivo.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2003-07-18 CVE Reserved
- 2004-03-16 CVE Published
- 2024-08-08 CVE Updated
- 2024-08-08 First Exploit
- 2025-03-30 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (8)
| URL | Date | SRC |
|---|---|---|
| http://archives.neohapsis.com/archives/vulnwatch/2004-q1/0056.html | 2024-08-08 |
| URL | Date | SRC |
|---|---|---|
| http://www.debian.org/security/2004/dsa-459 | 2017-10-11 | |
| http://www.redhat.com/support/errata/RHSA-2004-074.html | 2017-10-11 |
| URL | Date | SRC |
|---|---|---|
| http://www.mandriva.com/security/advisories?name=MDKSA-2004:022 | 2017-10-11 | |
| https://access.redhat.com/security/cve/CVE-2003-0592 | 2004-03-10 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1617057 | 2004-03-10 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 2.1.1 Search vendor "Kde" for product "Konqueror" and version "2.1.1" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 2.2.2 Search vendor "Kde" for product "Konqueror" and version "2.2.2" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.0 Search vendor "Kde" for product "Konqueror" and version "3.0" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.0.1 Search vendor "Kde" for product "Konqueror" and version "3.0.1" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.0.2 Search vendor "Kde" for product "Konqueror" and version "3.0.2" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.0.3 Search vendor "Kde" for product "Konqueror" and version "3.0.3" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.0.5 Search vendor "Kde" for product "Konqueror" and version "3.0.5" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.1 Search vendor "Kde" for product "Konqueror" and version "3.1" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.1.1 Search vendor "Kde" for product "Konqueror" and version "3.1.1" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Search vendor "Kde" for product "Konqueror" | 3.1.2 Search vendor "Kde" for product "Konqueror" and version "3.1.2" | - |
Affected
| ||||||
| Kde Search vendor "Kde" | Konqueror Embedded Search vendor "Kde" for product "Konqueror Embedded" | 0.1 Search vendor "Kde" for product "Konqueror Embedded" and version "0.1" | - |
Affected
| ||||||