PT-2007-3625 · Mozilla+1 · Firefox+2
Publicado
2007-04-26
·
Atualizado
2021-07-23
·
CVE-2007-2292
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions prior to 2.0.0.8
SeaMonkey versions prior to 1.1.5
Description
A CRLF injection issue exists in the Digest Authentication support, allowing remote attackers to conduct HTTP request splitting attacks. This is achieved by inserting LF (%0a) bytes in the
username attribute.Recommendations
For Mozilla Firefox versions prior to 2.0.0.8, update to version 2.0.0.8 or later to resolve the issue.
For SeaMonkey versions prior to 1.1.5, update to version 1.1.5 or later to resolve the issue.
Correção
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey