NVD

Id
54459  
Name
CVE-2007-2292  
Description
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-04-26  
Modified Date
2011-03-07  
Seq
2007-2292  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
276219 54459 CVE-2007-2292 HPSBUX02153  View
276220 54459 CVE-2007-2292 oval:org.mitre.oval:def:10195  View
276221 54459 CVE-2007-2292 2654  View
276222 54459 CVE-2007-2292 201516  View
276223 54459 CVE-2007-2292 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
276224 54459 CVE-2007-2292 DSA-1392  View
276225 54459 CVE-2007-2292 DSA-1396  View
276226 54459 CVE-2007-2292 DSA-1401  View
276227 54459 CVE-2007-2292 GLSA-200711-14  View
276228 54459 CVE-2007-2292 MDKSA-2007:202  View
276229 54459 CVE-2007-2292 http://www.mozilla.org/security/announce/2007/mfsa2007-31.html  View
276230 54459 CVE-2007-2292 SUSE-SA:2007:057  View
276231 54459 CVE-2007-2292 RHSA-2007:0979  View
276232 54459 CVE-2007-2292 RHSA-2007:0980  View
276233 54459 CVE-2007-2292 RHSA-2007:0981  View
276234 54459 CVE-2007-2292 20070425 IE 7 and Firefox Browsers Digest Authentication Request Splitting  View
276235 54459 CVE-2007-2292 20071026 rPSA-2007-0225-1 firefox  View
276236 54459 CVE-2007-2292 20071029 FLEA-2007-0062-1 firefox  View
276237 54459 CVE-2007-2292 20071029 rPSA-2007-0225-2 firefox thunderbird  View
276238 54459 CVE-2007-2292 23668  View
276239 54459 CVE-2007-2292 1017968  View
276240 54459 CVE-2007-2292 USN-536-1  View
276241 54459 CVE-2007-2292 USN-535-1  View
276242 54459 CVE-2007-2292 ADV-2007-3544  View
276243 54459 CVE-2007-2292 ADV-2007-3587  View
276244 54459 CVE-2007-2292 ADV-2008-0083  View
276245 54459 CVE-2007-2292 http://www.wisec.it/vulns.php?id=11  View
276246 54459 CVE-2007-2292 firefox-lf-response-splitting(33981)  View
276247 54459 CVE-2007-2292 https://bugzilla.mozilla.org/show_bug.cgi?id=378787  View
276248 54459 CVE-2007-2292 https://issues.rpath.com/browse/RPL-1858  View
276249 54459 CVE-2007-2292 FEDORA-2007-3431  View
276250 54459 CVE-2007-2292 FEDORA-2007-2601  View
276251 54459 CVE-2007-2292 FEDORA-2007-2664  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52195 JVNDB-2007-000885 Mozilla Firefox/SeaMonkey のダイジェスト認証における CRLF インジェクションの脆弱性 Mozilla Firefox および SeaMonkey のダイジェスト認証には、HTTP リクエストの username 属性における LF (%0a) 文字の取り扱いに不備があり、CRLF インジェクションの脆弱性が存在します。 CVE-2007-2292 25647 CVE-2007-2292 54459 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000885.html 2007-04-26 2008-01-23 View