CVE-2002-2013

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Mozilla 0.9.6 and earlier and Netscape 6.2 and earlier allows remote attackers to steal cookies from another domain via a link with a hex-encoded null character (%00) followed by the target domain.

Affected (30)

Products: Mozilla: Mozilla · Netscape: Communicator, Navigator

1 product

2 products

Configuration A

30 vulnerable

Vulnerable Software	Affected Versions
Mozilla Mozilla	Version 0.9.2.1
Mozilla Mozilla	Version 0.9.2
Mozilla Mozilla	Version 0.9.3
Mozilla Mozilla	Version 0.9.4.1
Mozilla Mozilla	Version 0.9.4
Mozilla Mozilla	Version 0.9.5
Mozilla Mozilla	Version 0.9.6
Netscape Communicator	Version 4.06
Netscape Communicator	Version 4.07
Netscape Communicator	Version 4.08
Netscape Communicator	Version 4.0
Netscape Communicator	Version 4.4
Netscape Communicator	Version 4.51
Netscape Communicator	Version 4.5
Netscape Communicator	Version 4.5_beta
Netscape Communicator	Version 4.61
Netscape Communicator	Version 4.6
Netscape Communicator	Version 4.72
Netscape Communicator	Version 4.73
Netscape Communicator	Version 4.74
Netscape Communicator	Version 4.75
Netscape Communicator	Version 4.76
Netscape Communicator	Version 4.77
Netscape Communicator	Version 4.78
Netscape Communicator	Version 4.7
Netscape Navigator	Version 4.77
Netscape Navigator	Version 6.01
Netscape Navigator	Version 6.0
Netscape Navigator	Version 6.1
Netscape Navigator	Version 6.2