CVE-2005-0149

Опубликовано: 15 фев. 2005

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

Ссылки

http://secunia.com/advisories/19823
http://www.mozilla.org/security/announce/mfsa2005-11.html
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_04_25.html
http://www.redhat.com/support/errata/RHSA-2005-094.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-323.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-335.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12407
https://bugzilla.mozilla.org/show_bug.cgi?id=268107
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19172
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407
http://secunia.com/advisories/19823
http://www.mozilla.org/security/announce/mfsa2005-11.html
Patch
Vendor Advisory
http://www.novell.com/linux/security/advisories/2006_04_25.html
http://www.redhat.com/support/errata/RHSA-2005-094.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-323.html
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-335.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/12407
https://bugzilla.mozilla.org/show_bug.cgi?id=268107
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/19172

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:mozilla:1.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:alpha:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:beta:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:rc1:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:rc2:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7:rc3:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:mozilla:1.7.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*

cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*

EPSS

Процентиль: 74%

0.01682

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

CVE-2005-0149

ubuntu

больше 21 года назад

CVE-2005-0149

redhat

больше 21 года назад

CVE-2005-0149

debian

больше 21 года назад

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obe ...

GHSA-2x58-77jw-wgpw

github

около 4 лет назад

EPSS

Процентиль: 74%

0.01682

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other