CVE-2007-5337 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-5337
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-5337

Description: Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/37287 UBUNTU http://www.ubuntu.com/usn/usn-536-1 http://www.ubuntulinux.org/support/documentation/usn/usn-535-1 SUSE http://www.novell.com/linux/security/advisories/2007_57_mozilla.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-66-201516-1 ST 1018837 SAID Secunia Advisory: SA27414 Secunia Advisory: SA27665 Secunia Advisory: SA27336 Secunia Advisory: SA27298 Secunia Advisory: SA27387 Secunia Advisory: SA27480 Secunia Advisory: SA27403 Secunia Advisory: SA27425 Secunia Advisory: SA27383 Secunia Advisory: SA27356 Secunia Advisory: SA27276 Secunia Advisory: SA27325 Secunia Advisory: SA27327 Secunia Advisory: SA27335 Secunia Advisory: SA27680 Secunia Advisory: SA27360 Secunia Advisory: SA28398 REDHAT http://www.redhat.com/support/errata/RHSA-2007-0979.html http://www.redhat.com/support/errata/RHSA-2007-0981.html http://www.redhat.com/support/errata/RHSA-2007-0980.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11443 MISC MANDRIVA http://www.mandriva.com/en/security/advisories?name=MDKSA-2007:202 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200711-14.xml FEDORA DEBIAN http://www.debian.org/security/2007/dsa-1396 http://www.debian.org/security/2007/dsa-1401 http://www.debian.org/security/2007/dsa-1392 CONFIRM http://www.mozilla.org/security/announce/2007/mfsa2007-34.html http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/482932/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/482876/100/200/threaded http://www.securityfocus.com/archive/1/archive/1/482925/100/0/threaded BID 26132

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability