CVE-2004-0746: Gentoo Linux

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

Affected products

• Gentoo Linux: version 1.4 only
• Kde Kde: version 3.1.3 only; version 3.2 only
• Kde Konqueror: version 3.0 only; version 3.0.1 only; version 3.0.2 only; version 3.0.3 only; version 3.0.5 only; version 3.0.5b only; …
• Mandrakesoft Mandrake Linux: version 9.2 only; version 10.0 only
• Suse Suse Linux: version 8 only; version 8.1 only; version 8.2 only; version 9.0 only; version 9.1 only

Published 2004-10-20. Last modified 2026-06-16.