PT-2007-2247 · Mozilla+1 · Firefox+1

Kaneda · Publicado 2007-02-07 · Atualizado 2022-02-26 · CVE-2007-0802

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox version 2.0.0.1

Description The issue allows remote attackers to bypass the Phishing Protection mechanism by adding certain characters to the end of the domain name. This can be achieved by using characters such as the "." and "/" at the end of the domain, which are not properly filtered by the Phishing List blacklist.

Recommendations For Mozilla Firefox version 2.0.0.1, consider updating to a newer version that addresses this issue, as the current version allows attackers to bypass phishing protections by manipulating domain names.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0802

Produtos afetados

Firefox

Opera

Referências · 7

• 🔥 http://kaneda.bohater.net/security/20070111-firefox_2.0.0.1_bypass_phishing_protection.php · Exploit
• http://securityfocus.com/archive/1/459265/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0802 · Nota de Segurança
• https://bugzilla.mozilla.org/show_bug.cgi?id=367538 · Nota
• http://osvdb.org/33705 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2007-04/0516.html · Nota
• http://securityfocus.com/archive/1/archive/1/459265/100/0/threaded · Nota