|
|
CVE Reference: CVE-2005-0590 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2005-0590 |
|
|
Description: The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname. |
|
|
CVE Status: Candidate |
|
|
References: SUSE http://www.novell.com/linux/security/advisories/2006_04_25.html SAID Secunia Advisory: SA19823 REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-176.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100041 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10010 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-17.html BID 12659 |
|
| Return to the previous page. |
