CVE-2008-7293

CVE-2008-7293 describes a "cookie forcing" vulnerability in Mozilla Firefox versions prior to 4, where the browser failed to adequately restrict modifications to cookies set during HTTPS sessions. This allowed man-in-the-middle attackers to overwrite or delete arbitrary cookies by injecting a Set-Cookie header in an HTTP response, primarily due to the absence of the HTTP Strict Transport Security (HSTS) includeSubDomains feature. The vulnerability has a CVSS score of 5.8, indicating a medium severity with network-based attacks, medium complexity, and potential for partial impact on integrity and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this decade-old vulnerability.