Secunia Logo
Netsikker nu! 2008
 
Debian update for mozilla-firefox
Secunia Advisory: SA17026
Release Date: 2005-10-03
Last Update: 2005-10-04
Popularity: 7,779 views

Critical:
Highly critical
Impact: Security Bypass
Spoofing
Manipulation of data
System access
Where: From remote
Solution Status: Vendor Patch

OS:Debian GNU/Linux 3.1
Debian GNU/Linux unstable alias sid

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-2701
CVE-2005-2702
CVE-2005-2703
CVE-2005-2704
CVE-2005-2705
CVE-2005-2706
CVE-2005-2707


Description:
Debian has issued an update for mozilla-firefox. This fixes some vulnerabilities, which can be exploited by malicious people to conduct spoofing attacks, manipulate certain data, bypass certain security restrictions, and compromise a user's system.

For more information:
SA16911

Solution:
Apply updated packages.

-- Debian GNU/Linux 3.1 alias sarge --

Source archives:

http://security.debian.org/pool/updat...fox/mozilla-firefox_1.0.4-2sarge5.dsc
Size/MD5 checksum: 1001 bf9cf2b7106335cccc2afb10f6386c57
http://security.debian.org/pool/updat...mozilla-firefox_1.0.4-2sarge5.diff.gz
Size/MD5 checksum: 332598 d3f81e09a762be3c51aa20655ada5d32
http://security.debian.org/pool/updat...fox/mozilla-firefox_1.0.4.orig.tar.gz
Size/MD5 checksum: 40212297 8e4ba81ad02c7986446d4e54e978409d

Alpha architecture:

http://security.debian.org/pool/updat...zilla-firefox_1.0.4-2sarge5_alpha.deb
Size/MD5 checksum: 11167102 e970a996296228bd2af2cb8006a86398
http://security.debian.org/pool/updat...dom-inspector_1.0.4-2sarge5_alpha.deb
Size/MD5 checksum: 167592 d446479007005f2d27d079ccedf51d7d
http://security.debian.org/pool/updat...gnome-support_1.0.4-2sarge5_alpha.deb
Size/MD5 checksum: 59416 7bf500b4f181df6ab4aa6dc831a23338

AMD64 architecture:

http://security.debian.org/pool/updat...zilla-firefox_1.0.4-2sarge5_amd64.deb
Size/MD5 checksum: 9399402 d94263433669cae93749d3f0d378839c
http://security.debian.org/pool/updat...dom-inspector_1.0.4-2sarge5_amd64.deb
Size/MD5 checksum: 162334 4ffdc291bacf5b604deeaf8d6efd96eb
http://security.debian.org/pool/updat...gnome-support_1.0.4-2sarge5_amd64.deb
Size/MD5 checksum: 57946 7d7472b0fb90ed789c4f84dbcdd14687

ARM architecture:

http://security.debian.org/pool/updat...mozilla-firefox_1.0.4-2sarge5_arm.deb
Size/MD5 checksum: 8217720 3e0ce81e8d78fbca6d38d6a7e90791f3
http://security.debian.org/pool/updat...x-dom-inspector_1.0.4-2sarge5_arm.deb
Size/MD5 checksum: 153792 662f8f96e75cc109541bf141e79a2714
http://security.debian.org/pool/updat...x-gnome-support_1.0.4-2sarge5_arm.deb
Size/MD5 checksum: 53280 b3517ce11632b3adbf5970d8f4c35b8c

Intel IA-32 architecture:

http://security.debian.org/pool/updat...ozilla-firefox_1.0.4-2sarge5_i386.deb
Size/MD5 checksum: 8891730 795a6aa3ca33a5e328e863612ceb0ac3
http://security.debian.org/pool/updat...-dom-inspector_1.0.4-2sarge5_i386.deb
Size/MD5 checksum: 157566 5e5d92e6c30a1d677edcc2fd9beb1861
http://security.debian.org/pool/updat...-gnome-support_1.0.4-2sarge5_i386.deb
Size/MD5 checksum: 54820 885991c2f4580f06f12ba1cc6ff456ac

Intel IA-64 architecture:

http://security.debian.org/pool/updat...ozilla-firefox_1.0.4-2sarge5_ia64.deb
Size/MD5 checksum: 11618922 f02ebe51045adc2008ebba0a7355f58c
http://security.debian.org/pool/updat...-dom-inspector_1.0.4-2sarge5_ia64.deb
Size/MD5 checksum: 167924 863962943669b737773e716bb45560b7
http://security.debian.org/pool/updat...-gnome-support_1.0.4-2sarge5_ia64.deb
Size/MD5 checksum: 62602 01f5675efee57e112e1734306580e43b

HP Precision architecture:

http://security.debian.org/pool/updat...ozilla-firefox_1.0.4-2sarge5_hppa.deb
Size/MD5 checksum: 10267086 7fb5e359ae146c7306def5b0a7ba48b4
http://security.debian.org/pool/updat...-dom-inspector_1.0.4-2sarge5_hppa.deb
Size/MD5 checksum: 165300 cf86dfe338ca9bfde77a402690db15ae
http://security.debian.org/pool/updat...-gnome-support_1.0.4-2sarge5_hppa.deb
Size/MD5 checksum: 58402 f98081adb227cf6a12dc267bbf9c7689

Motorola 680x0 architecture:

http://security.debian.org/pool/updat...ozilla-firefox_1.0.4-2sarge5_m68k.deb
Size/MD5 checksum: 8167708 d5d4eadda39add959235921126b5db4b
http://security.debian.org/pool/updat...-dom-inspector_1.0.4-2sarge5_m68k.deb
Size/MD5 checksum: 156434 01a518572787d1e5505eb393c4670cd9
http://security.debian.org/pool/updat...-gnome-support_1.0.4-2sarge5_m68k.deb
Size/MD5 checksum: 54070 b50c79ee5b2b3fd61ccb3848ad201f29

Big endian MIPS architecture:

http://security.debian.org/pool/updat...ozilla-firefox_1.0.4-2sarge5_mips.deb
Size/MD5 checksum: 9922382 384196380da339cc6c381afd18c8d0e8
http://security.debian.org/pool/updat...-dom-inspector_1.0.4-2sarge5_mips.deb
Size/MD5 checksum: 155362 38e914d95e0b2d38b2d34f09988218c9
http://security.debian.org/pool/updat...-gnome-support_1.0.4-2sarge5_mips.deb
Size/MD5 checksum: 55078 343647c905cf9792d53eb67b4e11df02

Little endian MIPS architecture:

http://security.debian.org/pool/updat...illa-firefox_1.0.4-2sarge5_mipsel.deb
Size/MD5 checksum: 9804868 cfe93fb808ecfc8e9a2bf359af772069
http://security.debian.org/pool/updat...om-inspector_1.0.4-2sarge5_mipsel.deb
Size/MD5 checksum: 154892 9321e20f831ad309fc214c8130223103
http://security.debian.org/pool/updat...nome-support_1.0.4-2sarge5_mipsel.deb
Size/MD5 checksum: 54904 74a6c0efaa41729a646d5f5762ab637d

PowerPC architecture:

http://security.debian.org/pool/updat...lla-firefox_1.0.4-2sarge5_powerpc.deb
Size/MD5 checksum: 8563444 7c373a381a8ba34307e59f2cd47fcc43
http://security.debian.org/pool/updat...m-inspector_1.0.4-2sarge5_powerpc.deb
Size/MD5 checksum: 155948 a764030b0841e225c5a89e6366bb88e5
http://security.debian.org/pool/updat...ome-support_1.0.4-2sarge5_powerpc.deb
Size/MD5 checksum: 57186 39cb6349c6ef1bc0e9e62365e7beeebf

Sun Sparc architecture:

http://security.debian.org/pool/updat...zilla-firefox_1.0.4-2sarge5_sparc.deb
Size/MD5 checksum: 8652776 fa0fdecf5fb5ed186ade4d987b8920cb
http://security.debian.org/pool/updat...dom-inspector_1.0.4-2sarge5_sparc.deb
Size/MD5 checksum: 156204 84483f5fa63c2da5f6e8de90f462edbe
http://security.debian.org/pool/updat...gnome-support_1.0.4-2sarge5_sparc.deb
Size/MD5 checksum: 53640 d43b2dbd4fd362e7fd01b4985c0ff3d0

-- Debian GNU/Linux unstable alias sid --

Fixed in version 1.0.7-1.

Changelog:
2005-10-04: Added link to DSA-838.

Original Advisory:
http://www.debian.org/security/2005/dsa-838

Other References:
SA16911:
http://secunia.com/advisories/16911/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB "gen_rand_string()" Predictable RNG Weakness // 93 views
2. Zeroboard Multiple Vulnerabilities // 53 views
3. Zeroboard Two Vulnerabilities // 39 views
4. phpBB Avatar Functions Information Disclosure and Deletion // 34 views
5. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 34 views
6. CA ARCserve Backup Multiple Vulnerabilities // 30 views
7. phpBB "url" bbcode Script Insertion Vulnerability // 30 views
8. phpBB Avatar Script Insertion Vulnerability // 29 views
9. ArticleBeach Script "page" File Inclusion Vulnerability // 26 views
10. CUPS Multiple Vulnerabilities // 25 views