Vulnerability Details : CVE-2002-2013
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Products affected by CVE-2002-2013
- cpe:2.3:a:netscape:navigator:6.2:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:navigator:6.1:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:navigator:6.0:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:navigator:6.01:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:navigator:4.77:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.07:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.51:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.6:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.06:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.5:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.61:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.7:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.08:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.72:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.5_beta:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.73:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.74:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.75:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.77:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.76:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.78:*:*:*:*:*:*:*
- cpe:2.3:a:netscape:communicator:4.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:mozilla:0.9.4.1:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2002-2013
0.32%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 71 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2002-2013
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:P/I:N/A:N |
10.0
|
2.9
|
NIST |
Vendor statements for CVE-2002-2013
-
Red Hat 2006-08-30Not vulnerable. This issue did not affect the versions of Mozilla as shipped with Red Hat Enterprise Linux 2.1, 3, or 4.
References for CVE-2002-2013
Jump to