PT-2005-3309 · Mozilla · Firefox

Dori Eldar · Publicado 2005-07-27 · Atualizado 2017-07-11 · CVE-2005-2395

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 1.0.4 through 1.0.5

Description The issue is related to the authentication scheme used by the browser. According to the description, the browser does not choose the challenge with the strongest authentication scheme available as required by RFC2617. This might cause credentials to be sent in plaintext even if an encrypted channel is available.

Recommendations For Mozilla Firefox versions 1.0.4 through 1.0.5, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-2395

Produtos afetados

Firefox

Referências · 8

• 🔥 http://securityfocus.com/archive/1/405666 · Exploit
• http://securityreason.com/securityalert/8 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22272 · Nota
• https://bugzilla.mozilla.org/show_bug.cgi?id=281851 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2395 · Nota de Segurança
• http://securiteam.com/securitynews/5PP0L00GUQ.html · Nota
• http://securityfocus.com/bid/14325 · Nota
• http://osvdb.org/19002 · Nota