What’s Vulnerable › Vulnerabilities

CVE-2002-1152

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-10-11 · updated 2026-06-16

Description

Konqueror in KDE 3.0 through 3.0.2 does not properly detect the "secure" flag in an HTTP cookie, which could cause Konqueror to send the cookie across an unencrypted channel, which could allow remote attackers to steal the cookie via sniffing.

Affected products

• Kde: 3.0, 3.0.1, 3.0.2

References

• http://marc.info/?l=bugtraq&m=103175827225044&w=2
• http://www.iss.net/security_center/static/10083.php
• http://www.kde.org/info/security/advisory-20020908-1.txt
• http://www.redhat.com/support/errata/RHSA-2002-220.html
• http://www.securityfocus.com/bid/5691
• http://marc.info/?l=bugtraq&m=103175827225044&w=2
• http://www.iss.net/security_center/static/10083.php
• http://www.kde.org/info/security/advisory-20020908-1.txt
• http://www.redhat.com/support/errata/RHSA-2002-220.html
• http://www.securityfocus.com/bid/5691

Get alerted when CVE-2002-1152 or the next vulnerability affects your stack