PT-2003-2210 · Mozilla+1 · Mozilla Firefox+1

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1265

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netscape version 7.0 Mozilla version 5.0

Description The issue allows local users to access deleted messages because they are not immediately deleted from the trash folder when the 'Empty Trash' option is selected.

Recommendations For Netscape version 7.0, manually delete messages in the trash folder after selecting the 'Empty Trash' option to ensure they are removed. For Mozilla version 5.0, consider regularly checking and manually deleting the contents of the trash folder to prevent access to deleted messages.

Exploit

Fix

Related Identifiers

CVE-2003-1265

Affected Products

Mozilla Firefox

Netscape

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2002-12/0277.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1265 · Security Note
• http://iss.net/security_center/static/10963.php · Note
• http://securityfocus.com/bid/6499 · Note
• http://securitytracker.com/id?1005871 · Note