CVE-2005-4684 - CVE House
Back to Database
Status published Medium CVE-2005-4684

Konqueror can associate a cookie with multiple domains when the...

Vulnerability Description

Konqueror can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-4684

Credits & Attribution

No credits recorded in the NVD database.

References

More from kde

View All →
CVE-2022-24986
KDE KCron through 21.12.2 uses a temporary file in /tmp...
High 7.8
CVE-2022-23853
The LSP (Language Server Protocol) plugin in KDE Kate before...
High 7.8
CVE-2021-38373
In KDE KMail 19.12.3 (aka 5.13.3), the SMTP STARTTLS option...
Medium 5.3
CVE-2021-38372
In KDE Trojita 0.7, man-in-the-middle attackers can create new folders...
Low 3.7
CVE-2021-36083
KDE KImageFormats 5.70.0 through 5.81.0 has a stack-based buffer overflow...
Medium 5.5

Affected Vendor

Affected Software

konqueror
Vulnerable Versions:
0.1, 2.1.1, 2.1.2, 2.2.1, 2.2.2, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.0.5, 3.0.5b, 3.1, 3.1.1, 3.1.2, 3.1.3, 3.1.4, 3.1.5, 3.2.1, 3.2.2.6, 3.2.3, 3.3, 3.3.1, 3.3.2

Timeline

Official Publish: February 1st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.