CVE-2004-0871: Medium severity Mozilla Mozilla vulnerability
Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0871?
CVE-2004-0871 is classified as a medium severity vulnerability due to the risk of cookie theft which could lead to unauthorized access.
How do I fix CVE-2004-0871?
To mitigate CVE-2004-0871, ensure that your web applications properly configure cookies to be sent only over secure channels through the use of the Secure attribute.
What systems are affected by CVE-2004-0871?
CVE-2004-0871 affects versions of Mozilla browsers up to and including 0.9.2.
What is the impact of CVE-2004-0871?
The impact of CVE-2004-0871 allows attackers to exploit cookie data, leading to potential session hijacking and unauthorized actions.
Is CVE-2004-0871 still a concern today?
While CVE-2004-0871 specifically affects older versions of Mozilla, similar vulnerabilities can still pose a risk in modern web applications if not properly addressed.