CVE-2004-0779

EPSS 0.79%
Published 18.08.2004 04:00:00
Last modified 03.04.2025 01:03:51
Source cve@mitre.org
Teams watchlist Login
Open Login

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.

Affected products Warnungen 0 Metrics 2 CWE 0 References 7

Data is provided by the National Vulnerability Database (NVD)

Firebirdsql ≫ Firebird Version0.7

Mozilla ≫ Firefox Version0.8

Mozilla ≫ Mozilla Version1.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.79%	0.715

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

http://www.mandriva.com/security/advisories?name=MDKSA-2004:082

http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7

http://bugzilla.mozilla.org/show_bug.cgi?id=226278

https://exchange.xforce.ibmcloud.com/vulnerabilities/17018

https://nvd.nist.gov/vuln/detail/CVE-2004-0779

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-0779

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-0779

EUVD