Vulnerabilities > CVE-2002-1204 - Information Disclosure vulnerability in Netscape User Preferences
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the user_pref() function and accessing the prefs.js file, which is stored in a directory with a predictable name.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 10 |