KDE Secure Cookie Exposure Vulnerability

Bugtraq ID:	5691
Class:	Design Error
CVE:	CVE-2002-1152
Remote:	Yes
Local:	No
Published:	Sep 11 2002 12:00AM
Updated:	Jul 11 2009 05:06PM
Credit:	This issue was publicized in a KDE Security Advisory.
Vulnerable:	KDE KDE 3.0.2 + Mandriva Linux Mandrake 8.2 KDE KDE 3.0.1 KDE KDE 3.0
Not Vulnerable:	KDE KDE 3.0.3 + Conectiva Linux Enterprise Edition 1.0 + FreeBSD FreeBSD 4.7 -STABLE + FreeBSD FreeBSD 4.7 -STABLE + Mandriva Linux Mandrake 9.0 + Mandriva Linux Mandrake 9.0

KDE Secure Cookie Exposure Vulnerability

The KDE HTML component used in browsers such as Konquerer does not detect the presence of the secure flag in cookies. The secure flag is used to denote that the cookie should only be sent via SSL connections. Since this flag is not properly acknowledged, it is possible that secure cookies may be sent over insecure connections. This may, under some circumstances, enable attackers to intercept "secure" cookie-based authentication credentials.

KDE Secure Cookie Exposure Vulnerability

Solution:
RedHat has released an advisory, RHSA-2002:220-40, that contains many fixes. Information about obtaining and applying fixes are available in the referenced advisory.

The vendor has addressed this issue in KDE 3.0.3. Users are advised to upgrade. Patches are also available.


KDE KDE 3.0

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches

KDE KDE 3.0.1

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches

KDE KDE 3.0.2

• KDE post-3.0-kdelibs-kcookiejar.diff
  ftp://ftp.kde.org/pub/kde/security_patches

KDE Secure Cookie Exposure Vulnerability

References: