CVE-2005-0590 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2005-0590
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-0590

Description: The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.

CVE Status: Candidate

References: SUSE http://www.novell.com/linux/security/advisories/2006_04_25.html SAID Secunia Advisory: SA19823 REDHAT http://www.redhat.com/support/errata/RHSA-2005-384.html http://www.redhat.com/support/errata/RHSA-2005-176.html OVAL http://oval.mitre.org/oval/definitions/data/oval100041.html GENTOO http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml CONFIRM http://www.mozilla.org/security/announce/mfsa2005-17.html BID 12659

Return to the previous page.