CVE-2004-0866

None

CVSS

—

EPSS

10.1%

Published

Sep 16, 2004

CISA due date

—

The record

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

Affected packages

Ecosystem	Package	Introduced	Fixed