6.4

CVE-2005-4685

Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mozilla ≫ Firefox Version 0.8
Mozilla ≫ Firefox Version 0.9
Mozilla ≫ Firefox Version 0.9 Update rc
Mozilla ≫ Firefox Version 0.9.1
Mozilla ≫ Firefox Version 0.9.2
Mozilla ≫ Firefox Version 0.9.3
Mozilla ≫ Firefox Version 0.10
Mozilla ≫ Firefox Version 0.10.1
Mozilla ≫ Firefox Version 1.0
Mozilla ≫ Firefox Version 1.0.1
Mozilla ≫ Firefox Version 1.0.2
Mozilla ≫ Firefox Version 1.0.3
Mozilla ≫ Firefox Version 1.0.4
Mozilla ≫ Firefox Version 1.0.5
Mozilla ≫ Firefox Version 1.0.6
Mozilla ≫ Firefox Version 1.0.7
Mozilla ≫ Firefox Version 1.5 Update beta1
Mozilla ≫ Firefox Version 1.5 Update beta2
Mozilla ≫ Firefox Version preview_release
Mozilla ≫ Mozilla Version 0.8
Mozilla ≫ Mozilla Version 0.9.2
Mozilla ≫ Mozilla Version 0.9.2.1
Mozilla ≫ Mozilla Version 0.9.3
Mozilla ≫ Mozilla Version 0.9.4
Mozilla ≫ Mozilla Version 0.9.4.1
Mozilla ≫ Mozilla Version 0.9.5
Mozilla ≫ Mozilla Version 0.9.6
Mozilla ≫ Mozilla Version 0.9.7
Mozilla ≫ Mozilla Version 0.9.8
Mozilla ≫ Mozilla Version 0.9.9
Mozilla ≫ Mozilla Version 0.9.35
Mozilla ≫ Mozilla Version 0.9.48
Mozilla ≫ Mozilla Version 1.0
Mozilla ≫ Mozilla Version 1.0 Update rc1
Mozilla ≫ Mozilla Version 1.0 Update rc2
Mozilla ≫ Mozilla Version 1.0.1
Mozilla ≫ Mozilla Version 1.0.2
Mozilla ≫ Mozilla Version 1.1
Mozilla ≫ Mozilla Version 1.1 Update alpha
Mozilla ≫ Mozilla Version 1.1 Update beta
Mozilla ≫ Mozilla Version 1.2
Mozilla ≫ Mozilla Version 1.2 Update alpha
Mozilla ≫ Mozilla Version 1.2 Update beta
Mozilla ≫ Mozilla Version 1.2.1
Mozilla ≫ Mozilla Version 1.3
Mozilla ≫ Mozilla Version 1.3.1
Mozilla ≫ Mozilla Version 1.4
Mozilla ≫ Mozilla Version 1.4 Update alpha
Mozilla ≫ Mozilla Version 1.4 Update beta
Mozilla ≫ Mozilla Version 1.4.1
Mozilla ≫ Mozilla Version 1.4.2
Mozilla ≫ Mozilla Version 1.4.4
Mozilla ≫ Mozilla Version 1.5
Mozilla ≫ Mozilla Version 1.5.1
Mozilla ≫ Mozilla Version 1.6
Mozilla ≫ Mozilla Version 1.7
Mozilla ≫ Mozilla Version 1.7 Update alpha
Mozilla ≫ Mozilla Version 1.7 Update beta
Mozilla ≫ Mozilla Version 1.7 Update rc1
Mozilla ≫ Mozilla Version 1.7 Update rc2
Mozilla ≫ Mozilla Version 1.7 Update rc3
Mozilla ≫ Mozilla Version 1.7.1
Mozilla ≫ Mozilla Version 1.7.2
Mozilla ≫ Mozilla Version 1.7.3
Mozilla ≫ Mozilla Version 1.7.4
Mozilla ≫ Mozilla Version 1.7.5
Mozilla ≫ Mozilla Version 1.7.6
Mozilla ≫ Mozilla Version 1.7.7
Mozilla ≫ Mozilla Version 1.7.8
Mozilla ≫ Mozilla Version 1.7.9
Mozilla ≫ Mozilla Version 1.7.10
Mozilla ≫ Mozilla Version 1.7.11
Mozilla ≫ Mozilla Version 1.7.12
Mozilla ≫ Mozilla Version 1.8 Update alpha1
Mozilla ≫ Mozilla Version 1.8 Update alpha2
Mozilla ≫ Mozilla Version 1.8 Update alpha3
Mozilla ≫ Mozilla Version 1.8 Update alpha4
Mozilla ≫ Mozilla Version m15
Mozilla ≫ Mozilla Version m16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.18% 0.643
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0123.html
http://www.securityfocus.com/bid/15331
https://exchange.xforce.ibmcloud.com/vulnerabilities/25291