CVE

Id
11353  
CVE No.
CVE-2005-0147  
Status
Candidate  
Description
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.  
Phase
Assigned (20050125)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
80682 11353 CVE-2005-0147 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-09.html  View
80683 11353 CVE-2005-0147 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=267263  View
80684 11353 CVE-2005-0147 REDHAT:RHSA-2005:323  View
80685 11353 CVE-2005-0147 URL:http://www.redhat.com/support/errata/RHSA-2005-323.html  View
80686 11353 CVE-2005-0147 BID:12407  View
80687 11353 CVE-2005-0147 URL:http://www.securityfocus.com/bid/12407  View
80688 11353 CVE-2005-0147 OVAL:oval:org.mitre.oval:def:100049  View
80689 11353 CVE-2005-0147 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100049  View
80690 11353 CVE-2005-0147 OVAL:oval:org.mitre.oval:def:9578  View
80691 11353 CVE-2005-0147 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9578  View
80692 11353 CVE-2005-0147 XF:mozilla-407-proxy-obtain-information(19174)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62918 JVNDB-2004-000260 Mozilla 製品における network.cookie.disableCookieForMailNews の設定を無視して Cookie の要求に応じてしまう脆弱性 ------------ CVE-2005-0149 11353 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000260.html  View