CVE-2004-0870
First published: Thu Sep 16 2004(Updated: )
KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Konqueror | =3.1.2 | |
| Konqueror | =3.0.2 | |
| Konqueror | =2.2.2 | |
| Konqueror | =3.1 | |
| Konqueror | =3.0 | |
| Konqueror | =3.0.1 | |
| Konqueror | =3.0.3 | |
| Konqueror | =3.1.1 | |
| Konqueror | =2.1.2 | |
| Konqueror | =3.2.3 | |
| Konqueror | =3.0.5b | |
| Konqueror | =2.2.1 | |
| Konqueror | =3.1.3 | |
| Konqueror | =3.1.4 | |
| Konqueror | =3.2.1 | |
| Konqueror | =3.1.5 | |
| Konqueror | =2.1.1 | |
| Konqueror | =3.0.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0870?
CVE-2004-0870 is classified as a medium severity vulnerability.
How do I fix CVE-2004-0870?
To fix CVE-2004-0870, update to a more recent version of KDE Konqueror that addresses this security vulnerability.
What type of attacks can exploit CVE-2004-0870?
CVE-2004-0870 can be exploited for cookie theft and unauthorized activities through cross-security boundary cookie injection.
What versions of KDE Konqueror are affected by CVE-2004-0870?
CVE-2004-0870 affects multiple versions of KDE Konqueror, including 2.1.1, 2.2.1, 2.2.2, and 3.x versions up to 3.2.3.
Is it safe to use versions of KDE Konqueror that are affected by CVE-2004-0870?
Using affected versions of KDE Konqueror can pose security risks, so it is advisable to upgrade them to mitigate these vulnerabilities.
- agent/references
- agent/type
- agent/first-publish-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/severity
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/kde
- canonical/konqueror
- version/konqueror/3.1.2
- version/konqueror/3.0.2
- version/konqueror/2.2.2
- version/konqueror/3.1
- version/konqueror/3.0
- version/konqueror/3.0.1
- version/konqueror/3.0.3
- version/konqueror/3.1.1
- version/konqueror/2.1.2
- version/konqueror/3.2.3
- version/konqueror/3.0.5b
- version/konqueror/2.2.1
- version/konqueror/3.1.3
- version/konqueror/3.1.4
- version/konqueror/3.2.1
- version/konqueror/3.1.5
- version/konqueror/2.1.1
- version/konqueror/3.0.5