FreeBSD : kdelibs -- konqueror cross-domain cookie injection (2797b27a-f55b-11d8-81b0-000347a4fa7d)

NASLDB: FreeBSD : kdelibs -- konqueror cross-domain cookie injection (2797b27a-f55b-11d8-81b0-000347a4fa7d)

General

ID: 18877
Name: FreeBSD : kdelibs — konqueror cross-domain cookie injection (2797b27a-f55b-11d8-81b0-000347a4fa7d)

Summary: Checks for updated package in pkg_info output

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Port: 0
Family: FreeBSD Local Security Checks
Type: Local

Description

According to a KDE Security Advisory :

WESTPOINT internet reconnaissance services alerted the KDE security
team that the KDE web browser Konqueror allows websites to set cookies
for certain country specific secondary top level domains.

Web sites operating under the affected domains can set HTTP cookies in
such a way that the Konqueror web browser will send them to all other
web sites operating under the same domain. A malicious website can use
this as part of a session fixation attack. See e.g.
http://www.acros.si/papers/session_fixation.pdf

Affected are all country specific secondary top level domains that use
more than 2 characters in the secondary part of the domain name and
that use a secondary part other than com, net, mil, org, gov, edu or
int. Examples of affected domains are .ltd.uk, .plc.uk and .firm.in

It should be noted that popular domains such as .co.uk, .co.in and
.com are NOT affected.

Exploiting

Exploit Available: True
Exploitability Ease: No exploit is required

Sources

CVE: CVE-2004-0746
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2004/08/23
Patch Release: 2004/08/26
Plugin Release: 2005/07/13

Plugin

Version: 1.13
Filename: freebsd_pkg_2797b27af55b11d881b0000347a4fa7d.nasl
Filesize: 5389 bytes
MD5 Hash: 948c4450e4bd4842419d17ba3b819982

Identification: Host/local_checks_enabled
Require Keys: Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info
Dependencies: "ssh_get_info.nasl"