|
|
CVE Reference: CVE-2005-0588 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-0588 |
|
|
Description: Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system. |
|
|
CVE Status: Candidate |
|
|
References: REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-176.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100038 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10682 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-20.html BID 12659 |
|
| Return to the previous page. |
