PT-2006-3812 · Netscape+2 · Netscape+4
Jesse Ruderman
·
Publicado
2006-06-07
·
Atualizado
2018-10-18
·
CVE-2006-2894
CVSS v2.0
4.0
Média
| Vetor | AV:N/AC:H/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.0.4 through 2.0.x before 2.0.0.8
Mozilla Suite version 1.7.13
Mozilla SeaMonkey versions prior to 1.1.5
Netscape versions 8.1 and earlier
Description
The issue allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box. This is achieved by using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.
Recommendations
For Mozilla Firefox versions 1.5.0.4 through 2.0.x before 2.0.0.8, update to version 2.0.0.8 or later.
For Mozilla Suite version 1.7.13, consider upgrading to a newer version.
For Mozilla SeaMonkey versions prior to 1.1.5, update to version 1.1.5 or later.
For Netscape versions 8.1 and earlier, consider upgrading to a newer version.
As a temporary workaround, consider disabling the use of Javascript keystroke events OnKeyDown, OnKeyPress, and OnKeyUp in file upload forms until a patch is available.
Exploit
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Hp-Ux
Firefox
Seamonkey
Suite
Netscape