CVE-2002-0594

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-06-18 · updated 2026-06-16

Description

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.

Affected products

Galeon Browser: 1.2, 1.2.1
Mozilla: 0.9.9, 1.0-rc1
Netscape Navigator: 6.0, 6.01, 6.1, 6.2, 6.2.1, 6.2.2

References

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490
http://online.securityfocus.com/archive/1/270249
http://www.iss.net/security_center/static/8977.php
http://www.redhat.com/support/errata/RHSA-2002-192.html
http://www.redhat.com/support/errata/RHSA-2003-046.html
http://www.securityfocus.com/bid/4640
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000490
http://online.securityfocus.com/archive/1/270249
http://www.iss.net/security_center/static/8977.php
http://www.redhat.com/support/errata/RHSA-2002-192.html
http://www.redhat.com/support/errata/RHSA-2003-046.html
http://www.securityfocus.com/bid/4640

Get alerted when CVE-2002-0594 or the next vulnerability affects your stack