PT-2006-3812 · Netscape+2 · Netscape+4
Jesse Ruderman
·
Published
2006-06-07
·
Updated
2018-10-18
·
CVE-2006-2894
CVSS v2.0
4.0
Medium
| Vector | AV:N/AC:H/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Mozilla Firefox versions 1.5.0.4 through 2.0.x before 2.0.0.8
Mozilla Suite version 1.7.13
Mozilla SeaMonkey versions prior to 1.1.5
Netscape versions 8.1 and earlier
Description
The issue allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target filename in a text box. This is achieved by using the OnKeyDown, OnKeyPress, and OnKeyUp Javascript keystroke events to change the focus and cause those characters to be inserted into a file upload input control, which can then upload the file when the user submits the form.
Recommendations
For Mozilla Firefox versions 1.5.0.4 through 2.0.x before 2.0.0.8, update to version 2.0.0.8 or later.
For Mozilla Suite version 1.7.13, consider upgrading to a newer version.
For Mozilla SeaMonkey versions prior to 1.1.5, update to version 1.1.5 or later.
For Netscape versions 8.1 and earlier, consider upgrading to a newer version.
As a temporary workaround, consider disabling the use of Javascript keystroke events OnKeyDown, OnKeyPress, and OnKeyUp in file upload forms until a patch is available.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Hp-Ux
Firefox
Seamonkey
Suite
Netscape