CVE-1999-0809 Security feature bypass in n/a
Netscape Communicator fails to enforce cookie origin restrictions, allowing cross-site cookie acceptance despite user configuration.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-1999-0809?
CVE-1999-0809 is a medium-severity vulnerability in n/a, published on 4 Jan 2000. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed".
Which versions are affected by CVE-1999-0809?
It affects 1 product.
Products include Netscape Communicator.
How do I fix CVE-1999-0809?
No fix has been published for CVE-1999-0809 yet. Limit exposure of the affected software until one is available.
Is CVE-1999-0809 being exploited?
There is no known exploitation of CVE-1999-0809 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2002-2248 Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbi
- CVE-1999-1189 Memory corruption in n/a
- CVE-2001-0596 Cross-site scripting in n/a
- CVE-1999-1357 Cross-site scripting in n/a
- CVE-2000-1187 Memory corruption in n/a
Sources
Also known as GHSA-h6pv-h65g-hmwg.