CVE-2006-1729 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2006-1729
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-1729

Description: Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/25823 UBUNTU http://www.ubuntulinux.org/support/documentation/usn/usn-271-1 http://www.ubuntulinux.org/support/documentation/usn/usn-275-1 SUSE http://www.novell.com/linux/security/advisories/2006_35_mozilla.html http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1 SGI SCO SAID Secunia Advisory: SA21033 Secunia Advisory: SA19746 Secunia Advisory: SA19721 Secunia Advisory: SA19714 Secunia Advisory: SA19941 Secunia Advisory: SA19902 Secunia Advisory: SA19863 Secunia Advisory: SA19862 Secunia Advisory: SA19852 Secunia Advisory: SA19811 Secunia Advisory: SA19794 Secunia Advisory: SA19759 Secunia Advisory: SA19649 Secunia Advisory: SA19631 Secunia Advisory: SA21622 Secunia Advisory: SA19696 Secunia Advisory: SA19729 Secunia Advisory: SA22066 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0329.html http://www.redhat.com/support/errata/RHSA-2006-0328.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10922 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1929 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:076 http://www.mandriva.com/security/advisories?name=MDKSA-2006:075 HP http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded GENTOO http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml FEDORA http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html http://www.securityfocus.com/archive/1/archive/1/436296/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html DEBIAN http://www.debian.org/security/2006/dsa-1046 http://www.debian.org/security/2006/dsa-1051 http://www.debian.org/security/2006/dsa-1044 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm http://www.mozilla.org/security/announce/2006/mfsa2006-23.html BID 17516

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability