CVE-2003-0593: Path Traversal
Published Mar 16, 2004
·Updated
Opera allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Opera to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
Affected Software
25 affected components
opera Opera Browser=5.0
opera Opera Browser=5.02
opera Opera Browser=5.10
opera Opera Browser=5.11
opera Opera Browser=5.12
opera Opera Browser=6.0
opera Opera Browser=6.01
opera Opera Browser=6.02
opera Opera Browser=6.03
opera Opera Browser=6.04
opera Opera Browser=6.05
opera Opera Browser=6.06
opera Opera Browser=6.10
opera Opera Browser=7.0
opera Opera Browser=7.0-beta1
opera Opera Browser=7.0-beta2
opera Opera Browser=7.01
opera Opera Browser=7.02
opera Opera Browser=7.03
opera Opera Browser=7.10
opera Opera Browser=7.11
opera Opera Browser=7.20
opera Opera Browser=7.21
opera Opera Browser=7.22
opera Opera Browser=7.23
Event History
Mar 16, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2003-0593?
CVE-2003-0593 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2003-0593?
To fix CVE-2003-0593, users should update to a patched version of the Opera browser.
3
Which versions of Opera are affected by CVE-2003-0593?
CVE-2003-0593 affects Opera versions from 5.0 up to 7.23.
4
What type of vulnerability is CVE-2003-0593?
CVE-2003-0593 is a directory traversal vulnerability that allows cookie access restrictions to be bypassed.
5
Can CVE-2003-0593 be exploited remotely?
Yes, CVE-2003-0593 can be exploited by remote attackers through crafted URLs.