CVE

Id
11794  
CVE No.
CVE-2005-0588  
Status
Candidate  
Description
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.  
Phase
Assigned (20050228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
84520 11794 CVE-2005-0588 CONFIRM:http://www.mozilla.org/security/announce/mfsa2005-20.html  View
84521 11794 CVE-2005-0588 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=271209  View
84522 11794 CVE-2005-0588 GENTOO:GLSA-200503-10  View
84523 11794 CVE-2005-0588 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-10.xml  View
84524 11794 CVE-2005-0588 GENTOO:GLSA-200503-30  View
84525 11794 CVE-2005-0588 URL:http://www.gentoo.org/security/en/glsa/glsa-200503-30.xml  View
84526 11794 CVE-2005-0588 REDHAT:RHSA-2005:176  View
84527 11794 CVE-2005-0588 URL:http://www.redhat.com/support/errata/RHSA-2005-176.html  View
84528 11794 CVE-2005-0588 REDHAT:RHSA-2005:384  View
84529 11794 CVE-2005-0588 URL:http://www.redhat.com/support/errata/RHSA-2005-384.html  View
84530 11794 CVE-2005-0588 BID:12659  View
84531 11794 CVE-2005-0588 URL:http://www.securityfocus.com/bid/12659  View
84532 11794 CVE-2005-0588 OVAL:oval:org.mitre.oval:def:100038  View
84533 11794 CVE-2005-0588 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:100038  View
84534 11794 CVE-2005-0588 OVAL:oval:org.mitre.oval:def:10682  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61953 JVNDB-2005-000155 Mozilla 製品のインストール確認ダイアログにおけるなりすましに利用される脆弱性 ------------ CVE-2005-0590 11794 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000155.html  View