Home Corporate Website Jobs Mailing Lists RSS Blog Advertise
	Software Inspectors   Scan Online   Personal (PSI)   Network (NSI 2.0) Solutions For   Security Professionals   Security Vendors Free Solutions For   Open Communities   Journalists & Media Secunia Advisories   Search   Historic Advisories   Listed By Product   Listed By Vendor   Statistics / Graphs   Secunia Research   Report Vulnerability   About Advisories Virus Information   Chronological List   Last 10 Virus Alerts   About Virus Information Secunia Customers   Customer Area CVE Reference: CVE-2006-4567 NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. Original Page at CVE MITRE: CVE-2006-4567 Description: Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update. CVE Status: Candidate References: XF   http://xforce.iss.net/xforce/xfdb/28950 UBUNTU   http://www.ubuntu.com/usn/usn-352-1   http://www.ubuntu.com/usn/usn-354-1   http://www.ubuntu.com/usn/usn-350-1   http://www.ubuntu.com/usn/usn-351-1 SUSE   http://www.novell.com/linux/security/advisories/2006_54_mozilla.html ST   1016851   1016850 SAID   Secunia Advisory: SA22066   Secunia Advisory: SA22195   Secunia Advisory: SA22056   Secunia Advisory: SA22422   Secunia Advisory: SA22274   Secunia Advisory: SA22210   Secunia Advisory: SA22088   Secunia Advisory: SA22074   Secunia Advisory: SA22055   Secunia Advisory: SA22025   Secunia Advisory: SA22001   Secunia Advisory: SA21950   Secunia Advisory: SA21939   Secunia Advisory: SA21916   Secunia Advisory: SA21949   Secunia Advisory: SA21906 REDHAT   http://www.redhat.com/support/errata/RHSA-2006-0675.html   http://www.redhat.com/support/errata/RHSA-2006-0677.html MANDRIVA   http://www.mandriva.com/security/advisories?name=MDKSA-2006:168   http://www.mandriva.com/security/advisories?name=MDKSA-2006:169 HP   http://www1.itrc.hp.com/service/cki/docDisplay.do?docId=c00771742 GENTOO   http://security.gentoo.org/glsa/glsa-200609-19.xml   http://security.gentoo.org/glsa/glsa-200610-01.xml CONFIRM   http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm   http://www.mozilla.org/security/announce/2006/mfsa2006-58.html BUGTRAQ   http://www.securityfocus.com/archive/1/archive/1/446140/100/0/threaded BID   20042 Return to the previous page. Secunia PSI Scan | Patch | Track Free Download Secunia Poll Do you think it's important to read Setup/User Guides for applications for use within your network? Yes, I do it all the time Yes, but I do it rarely No See Results    Most Popular Advisories 1. Blender Multiple Temporary File Security Issues 2. Drupal Site Documentation Module Information Disclosure 3. Symantec Altiris Deployment Solution Multiple Vulnerabilities 4. Kostenloses Linkmanagements cript Multiple Vulnerabilities 5. 68 Classifieds "cat" SQL Injection Vulnerability 6. Pet Grooming Management System "useradded.php" Security Bypass 7. W1L3D4 Philboard Multiple SQL Injection Vulnerabilities 8. Interspire ActiveKB Admin Interface Cookie Security Bypass 9. Feedback and Rating Script "listingid" SQL Injection 10. e107 BLOG Engine Plugin "rid" SQL Injection
Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia