5

CVE-2005-0590

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 0.8
Mozilla ≫ Firefox Version 0.9
Mozilla ≫ Firefox Version 0.9 Update rc
Mozilla ≫ Firefox Version 0.9.1
Mozilla ≫ Firefox Version 0.9.2
Mozilla ≫ Firefox Version 0.9.3
Mozilla ≫ Firefox Version 0.10
Mozilla ≫ Firefox Version 0.10.1
Mozilla ≫ Firefox Version 1.0
Mozilla ≫ Mozilla Version 1.3
Mozilla ≫ Mozilla Version 1.4
Mozilla ≫ Mozilla Version 1.4 Update alpha
Mozilla ≫ Mozilla Version 1.4.1
Mozilla ≫ Mozilla Version 1.5
Mozilla ≫ Mozilla Version 1.5 Update alpha
Mozilla ≫ Mozilla Version 1.5 Update rc1
Mozilla ≫ Mozilla Version 1.5 Update rc2
Mozilla ≫ Mozilla Version 1.5.1
Mozilla ≫ Mozilla Version 1.6
Mozilla ≫ Mozilla Version 1.6 Update alpha
Mozilla ≫ Mozilla Version 1.6 Update beta
Mozilla ≫ Mozilla Version 1.7
Mozilla ≫ Mozilla Version 1.7 Update alpha
Mozilla ≫ Mozilla Version 1.7 Update beta
Mozilla ≫ Mozilla Version 1.7 Update rc1
Mozilla ≫ Mozilla Version 1.7 Update rc2
Mozilla ≫ Mozilla Version 1.7 Update rc3
Mozilla ≫ Mozilla Version 1.7.1
Mozilla ≫ Mozilla Version 1.7.2
Mozilla ≫ Mozilla Version 1.7.3
Mozilla ≫ Mozilla Version 1.7.5
Mozilla ≫ Thunderbird Version 0.1
Mozilla ≫ Thunderbird Version 0.2
Mozilla ≫ Thunderbird Version 0.3
Mozilla ≫ Thunderbird Version 0.4
Mozilla ≫ Thunderbird Version 0.5
Mozilla ≫ Thunderbird Version 0.6
Mozilla ≫ Thunderbird Version 0.7
Mozilla ≫ Thunderbird Version 0.7.1
Mozilla ≫ Thunderbird Version 0.7.2
Mozilla ≫ Thunderbird Version 0.7.3
Mozilla ≫ Thunderbird Version 0.8
Mozilla ≫ Thunderbird Version 0.9
Mozilla ≫ Thunderbird Version 1.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.67% 0.738
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/19823
http://www.novell.com/linux/security/advisories/2006_04_25.html
http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-176.html
http://www.redhat.com/support/errata/RHSA-2005-384.html
http://www.securityfocus.com/bid/12659
http://www.mozilla.org/security/announce/mfsa2005-17.html
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=268059
Patch
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100041
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10010