NetSight
IP …
medium5.0

CVE-2002-2013

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null characte…

Impact

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Affected products

VendorProductAffected versions
MozillaMozilla
Versions 0.9.2, 0.9.2.1, 0.9.3, 0.9.4, 0.9.4.1, 0.9.5
NetscapeCommunicator
Versions 4.0, 4.4, 4.5, 4.5_beta, 4.06, 4.6
NetscapeNavigator
Versions 4.77, 6.0, 6.01, 6.1, 6.2

References