PT-2007-6406 · Mozilla+1 · Firefox+2
Publicado
2007-10-19
·
Atualizado
2018-10-15
·
CVE-2007-5337
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
Mozilla Firefox versions prior to 2.0.0.8
SeaMonkey versions prior to 1.1.5
Description:
The issue allows remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication. This is achieved by creating a web page on the target server, which contains URIs with
smb: or sftp: schemes that access other files from the server.Recommendations:
For Mozilla Firefox versions prior to 2.0.0.8, update to version 2.0.0.8 or later.
For SeaMonkey versions prior to 1.1.5, update to version 1.1.5 or later.
Correção
Information Disclosure
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Firefox
Red Hat
Seamonkey