CVE-2003-0592
High
Description
Konqueror in KDE 3.1.3 and earlier (kdelibs) allows remote attackers to bypass intended cookie access restrictions on a web application via "%2e%2e" (encoded dot dot) directory traversal sequences in a URL, which causes Konqueror to send the cookie outside the specified URL subsets, e.g. to a vulnerable application that runs on the same server as the target application.
SeverityHigh
CVSS7.5
Exploit probability91. percentile4.4%
ProductKde Konqueror
PublishedApr 15, 2004
First seenApr 15, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| kde konqueror | 2.1.1, 2.2.2, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.5, 3.1, 3.1.1, 3.1.2 | — |
| kde konqueror_embedded | 0.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.