CVE

Id
13661  
CVE No.
CVE-2005-2455  
Status
Candidate  
Description
Greasemonkey before 0.3.5 allows remote web servers to (1) read arbitrary files via a GET request to a file:// URL in the GM_xmlhttpRequest API function, (2) list installed scripts using GM_scripts, or obtain sensitive information via (3) GM_setValue and GM_getValue.  
Phase
Assigned (20050804)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
99185 13661 CVE-2005-2455 MLIST:[Greasemonkey] 20050718 greasemonkey for secure data over insecure networks / sites  View
99186 13661 CVE-2005-2455 URL:http://mozdev.org/pipermail/greasemonkey/2005-July/004022.html  View
99187 13661 CVE-2005-2455 MLIST:[Greasemonkey] 20050718 greasemonkey for secure data over insecure networks / sites  View
99188 13661 CVE-2005-2455 URL:http://mozdev.org/pipermail/greasemonkey/2005-July/004000.html  View
99189 13661 CVE-2005-2455 CONFIRM:http://greaseblog.blogspot.com/2005/07/mandatory-greasemonkey-update.html  View
99190 13661 CVE-2005-2455 CONFIRM:http://greasemonkey.mozdev.org/changes/0.3.5.html  View
99191 13661 CVE-2005-2455 MISC:http://www.securiteam.com/securitynews/5CP0P20GBK.html  View
99192 13661 CVE-2005-2455 BID:14336  View
99193 13661 CVE-2005-2455 URL:http://www.securityfocus.com/bid/14336  View
99194 13661 CVE-2005-2455 VUPEN:ADV-2005-1147  View
99195 13661 CVE-2005-2455 URL:http://www.vupen.com/english/advisories/2005/1147  View
99196 13661 CVE-2005-2455 OSVDB:18154  View
99197 13661 CVE-2005-2455 URL:http://www.osvdb.org/18154  View
99198 13661 CVE-2005-2455 SECTRACK:1014529  View
99199 13661 CVE-2005-2455 URL:http://securitytracker.com/id?1014529  View
99200 13661 CVE-2005-2455 SECUNIA:16128  View
99201 13661 CVE-2005-2455 URL:http://secunia.com/advisories/16128  View
99202 13661 CVE-2005-2455 XF:mozilla-greasemonkey-information-disclosure(21453)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62284 JVNDB-2005-000486 Linux Kernel の zisofs におけるカーネルがクラッシュする脆弱性 ------------ CVE-2005-2457 13661 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000486.html  View