CVE-2005-0588 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2005-0588
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0588

Description: Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.

CVE Status: Candidate

References: REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-176.html OVAL http://oval.mitre.org/oval/definitions/data/oval100038.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-20.html BID 12659

Return to the previous page.