PT-2005-1250 · Mozilla+1 · Thunderbird+2

Michiel Van Leeuwen + 1 · Publicado 2005-01-29 · Atualizado 2017-10-11 · CVE-2005-0149

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Thunderbird versions 0.6 through 0.9 Mozilla versions 1.7 through 1.7.3

Description The issue allows remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages, as the software does not obey the network.cookie.disableCookieForMailNews preference.

Recommendations For Thunderbird versions 0.6 through 0.9, consider disabling the use of cookies in e-mail messages until a patch is available. For Mozilla versions 1.7 through 1.7.3, restrict access to cookies in e-mail messages to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-0149

RHSA-2005:094

RHSA-2005:335

RHSA-2005_094

RHSA-2005_323

RHSA-2005_335

Produtos afetados

Mozilla Firefox

Red Hat

Thunderbird

Referências · 35

• https://redhat.com/security/data/cve/CVE-2005-0232.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0399.html · Nota
• http://mikx.de/firescrolling2 · Nota
• https://redhat.com/security/data/cve/CVE-2005-0149.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0146.html · Nota
• http://redhat.com/support/errata/RHSA-2005-323.html · Aviso do Fabricante
• http://redhat.com/support/errata/RHSA-2005-094.html · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2005-323.html · Nota
• https://redhat.com/security/data/cve/CVE-2005-0401.html · Nota
• http://securityfocus.com/bid/12407 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19172 · Nota
• http://securityfocus.com/bid/11439 · Nota
• http://mikx.de/fireflashing · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-October/027709.html · Nota
• http://securityfocus.com/bid/12885 · Nota