CVE-2002-1126

Mozilla 1.1 and earlier, and Mozilla-based browsers such as Netscape and Galeon, set the document referrer too quickly in certain situations when a new page is being loaded, which allows web pages to determine the next page that is being visited, including manually entered URLs, using the onunload handler.

• http://bugzilla.mozilla.org/show_bug.cgi?id=145579
• http://marc.info/?l=bugtraq&m=103176760004720&w=2
• http://www.iss.net/security_center/static/10084.phpVendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075
• http://www.redhat.com/support/errata/RHSA-2002-192.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2003-046.html
• http://www.securityfocus.com/bid/5694Exploit, Patch, Vendor Advisory
• http://bugzilla.mozilla.org/show_bug.cgi?id=145579
• http://marc.info/?l=bugtraq&m=103176760004720&w=2
• http://www.iss.net/security_center/static/10084.phpVendor Advisory
• http://www.mandrakesoft.com/security/advisories?name=MDKSA-2002:075
• http://www.redhat.com/support/errata/RHSA-2002-192.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2003-046.html
• http://www.securityfocus.com/bid/5694Exploit, Patch, Vendor Advisory

Published

Sep 24, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-1120Buffer overflow in Savant Web Server 3.1 and earlier allows …
• CVE-2002-1121SMTP content filter engines, including (1) GFI MailSecurity …
• CVE-2002-1122Buffer overflow in the parsing mechanism for ISS Internet Sc…
• CVE-2002-1123Buffer overflow in the authentication function for Microsoft…
• CVE-2002-1124Multiple buffer overflows in purity 1-16 allow local users t…
• CVE-2002-1125FreeBSD port programs that use libkvm for FreeBSD 4.6.2-RELE…
• CVE-2002-1127Buffer overflow in uucp in Compaq Tru64/OSF1 3.x allows loca…
• CVE-2002-1128Buffer overflow in inc mail utility for Compaq Tru64/OSF1 3.…
• CVE-2002-1129Buffer overflow in dxterm allows local users to execute arbi…
• CVE-2002-1131Cross-site scripting vulnerabilities in SquirrelMail 1.2.7 a…
• CVE-2002-1132SquirrelMail 1.2.7 and earlier allows remote attackers to de…
• CVE-2002-1133Encoded directory traversal vulnerability in Dino's web serv…