CVE

Id
9207  
CVE No.
CVE-2004-0779  
Status
Candidate  
Description
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.  
Phase
Assigned (20040813)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
60352 9207 CVE-2004-0779 CONFIRM:http://bugzilla.mozilla.org/show_bug.cgi?id=226278  View
60353 9207 CVE-2004-0779 CONFIRM:http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7  View
60354 9207 CVE-2004-0779 MANDRAKE:MDKSA-2004:082  View
60355 9207 CVE-2004-0779 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2004:082  View
60356 9207 CVE-2004-0779 XF:mozilla-plaintext-password(17018)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57814 JVNDB-2006-000010 Sun Solaris の uustat コマンドにおけるバッファオーバーフローの脆弱性 ------------ CVE-2004-0780 9207 7.2 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000010.html  View