Cross-domain Cookie Access Vulnerability in Netscape Navigator and Mozilla

CVE-2003-1492

Summary

The vulnerability in Netscape Navigator 7.0.2 and Mozilla allows remote attackers to exploit a flaw in HTTP requests, enabling them to gain unauthorized access to cookie information across different domains. This is achieved by manipulating the URL to include an extra dot at the end of the domain, thus tricking the browser into disclosing sensitive cookie data to an unauthorized source. As a result, this can lead to potential data theft or session hijacking, emphasizing the importance of secure cookie management and cross-origin resource sharing policies.

References