Описание
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 42.0+build2-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [42.0+build2-0ubuntu0.14.04.1]] |
| precise | released | 42.0+build2-0ubuntu0.12.04.1 |
| trusty | released | 42.0+build2-0ubuntu0.14.04.1 |
| trusty/esm | DNE | trusty was released [42.0+build2-0ubuntu0.14.04.1] |
| upstream | released | 42.0 |
| vivid | released | 42.0+build2-0ubuntu0.15.04.1 |
| wily | released | 42.0+build2-0ubuntu0.15.10.1 |
Показывать по
4.3 Medium
CVSS2
Связанные уязвимости
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authenti ...
Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authentication, allows remote attackers to obtain sensitive hostname information by constructing a crafted web site that sends an NTLM request and reads the Workstation field of an NTLM type 3 message.
Уязвимость браузера Firefox, позволяющая нарушителю получить доступ к защищаемой информации
4.3 Medium
CVSS2