What’s Vulnerable › Vulnerabilities
CVE-2002-2013
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2002-12-31 · updated 2026-06-16
Description
Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.
Affected products
- Mozilla: 0.9.2, 0.9.2.1, 0.9.3, 0.9.4, 0.9.4.1, 0.9.5 (+1)
- Netscape Communicator: 4.0, 4.4, 4.5, 4.5_beta, 4.06, 4.6 (+12)
- Netscape Navigator: 4.77, 6.0, 6.01, 6.1, 6.2
References
- http://alive.znep.com/~marcs/security/mozillacookie/demo.html
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html
- http://www.iss.net/security_center/static/7973.php
- http://www.securityfocus.com/bid/3925
- http://alive.znep.com/~marcs/security/mozillacookie/demo.html
- http://archives.neohapsis.com/archives/bugtraq/2002-01/0270.html
- http://www.iss.net/security_center/static/7973.php
- http://www.securityfocus.com/bid/3925
Get alerted when CVE-2002-2013 or the next vulnerability affects your stack