CVE

Id
78095  
CVE No.
CVE-2015-0832  
Status
Candidate  
Description
Mozilla Firefox before 36.0 does not properly recognize the equivalence of domain names with and without a trailing . (dot) character, which allows man-in-the-middle attackers to bypass the HPKP and HSTS protection mechanisms by constructing a URL with this character and leveraging access to an X.509 certificate for a domain with this character.  
Phase
Assigned (20150107)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
714544 78095 CVE-2015-0832 CONFIRM:http://www.mozilla.org/security/announce/2015/mfsa2015-13.html  View
714545 78095 CVE-2015-0832 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=1065909  View
714546 78095 CVE-2015-0832 CONFIRM:http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html  View
714547 78095 CVE-2015-0832 GENTOO:GLSA-201504-01  View
714548 78095 CVE-2015-0832 URL:https://security.gentoo.org/glsa/201504-01  View
714549 78095 CVE-2015-0832 SUSE:openSUSE-SU-2015:0404  View
714550 78095 CVE-2015-0832 URL:http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00000.html  View
714551 78095 CVE-2015-0832 SUSE:openSUSE-SU-2015:0570  View
714552 78095 CVE-2015-0832 URL:http://lists.opensuse.org/opensuse-updates/2015-03/msg00067.html  View
714553 78095 CVE-2015-0832 UBUNTU:USN-2505-1  View
714554 78095 CVE-2015-0832 URL:http://www.ubuntu.com/usn/USN-2505-1  View
714555 78095 CVE-2015-0832 BID:72752  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6319 JVNDB-2015-001639 Bluetooth Stack for Windows by Toshiba および TOSHIBA Service Station に権限昇格の脆弱性 株式会社東芝が提供する Bluetooth 制御ソフトウエアである Bluetooth Stack for Windows by Toshiba およびシステム管理アプリケーションソフトウエアである TOSHIBA Service Station には、引用符で囲まれていない Windows 検索パスに起因する権限昇格の脆弱性が存在します (CWE-428)。 CVE-2015-0884 78095 6.9 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001639.html  View