CVE-2005-2395

Exploit

EPSS 0.79%
Veröffentlicht 27.07.2005 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Firefox Version1.0.4

Mozilla ≫ Firefox Version1.0.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.79%	0.729

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://securityreason.com/securityalert/8

http://www.osvdb.org/19002

http://www.securiteam.com/securitynews/5PP0L00GUQ.html

http://www.securityfocus.com/archive/1/405666

Exploit

http://www.securityfocus.com/bid/14325

https://bugzilla.mozilla.org/show_bug.cgi?id=281851

https://exchange.xforce.ibmcloud.com/vulnerabilities/22272

https://nvd.nist.gov/vuln/detail/CVE-2005-2395

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-2395

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-2395

EUVD