PT-2006-3705 · Mozilla+1 · Firefox+2

Kazuho Oku · Published 2006-06-02 · Updated 2018-10-18 · CVE-2006-2786

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 1.5.0.4 Mozilla Thunderbird versions prior to 1.5.0.4

Description The issue allows remote attackers to cause the browser to interpret certain responses as if they were responses from two different sites. This can occur via invalid HTTP response headers with spaces between the header name and the colon, or through HTTP 1.1 headers sent via an HTTP 1.0 proxy. The proxy ignores these headers, but the client processes them.

Recommendations For Mozilla Firefox versions prior to 1.5.0.4, update to version 1.5.0.4 or later. For Mozilla Thunderbird versions prior to 1.5.0.4, update to version 1.5.0.4 or later.

Exploit

Fix

Related Identifiers

CVE-2006-2786

DSA-1118

DSA-1120

DSA-1134-1

HPSBUX02153

RHSA-2006:0578

RHSA-2006:0609

RHSA-2006:0610

RHSA-2006:0611

RHSA-2006_0609

RHSA-2006_0610

RHSA-2006_0611

Affected Products

Firefox

Thunderbird

Red Hat

References · 218

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/mozilla_navigatorjava.rb · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0780 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3737 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0776 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6589 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1729 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6506 · Security Note
• http://securityfocus.com/archive/1/446657/100/200/threaded · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-5464 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2006-2786 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0779 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5959 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0008 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2894 · Security Note