Gentoo: GLSA 200408-23 Low: kdelibs Cross-Domain Cookie Access

Gentoo Linux Security Advisory GLSA 200408-23 https://security.gentoo.org/ Severity: Low Title: kdelibs: Cross-domain cookie injection vulnerability Date: August 24, 2004 Bugs: #61389 ID: 200408-23

Synopsis ======= The cookie manager component in kdelibs contains a vulnerability allowing an attacker to potentially gain access to a user's session on a legitimate web server.
Background ========= KDE is a widely-used desktop environment based on the Qt toolkit. kcookiejar in kdelibs is responsible for storing and managing HTTP cookies. Konqueror uses kcookiejar for storing and managing cookies.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 kde-base/kdelibs <= 3.2.3-r1 ...