NVD

Id
56969  
Name
CVE-2007-4879  
Description
Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-09-13  
Modified Date
2011-03-07  
Seq
2007-4879  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
290790 56969 CVE-2007-4879 http://0x90.eu/ff_tls_poc.html  View
290791 56969 CVE-2007-4879 SUSE-SA:2008:019  View
290792 56969 CVE-2007-4879 238492  View
290793 56969 CVE-2007-4879 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128  View
290794 56969 CVE-2007-4879 DSA-1532  View
290795 56969 CVE-2007-4879 DSA-1534  View
290796 56969 CVE-2007-4879 DSA-1535  View
290797 56969 CVE-2007-4879 GLSA-200805-18  View
290798 56969 CVE-2007-4879 MDVSA-2008:080  View
290799 56969 CVE-2007-4879 http://www.mozilla.org/security/announce/2008/mfsa2008-17.html  View
290800 56969 CVE-2007-4879 20080327 rPSA-2008-0128-1 firefox  View
290801 56969 CVE-2007-4879 28448  View
290802 56969 CVE-2007-4879 1019704  View
290803 56969 CVE-2007-4879 USN-592-1  View
290804 56969 CVE-2007-4879 TA08-087A  View
290805 56969 CVE-2007-4879 ADV-2008-0998  View
290806 56969 CVE-2007-4879 ADV-2008-1793  View
290807 56969 CVE-2007-4879 https://bugzilla.mozilla.org/show_bug.cgi?id=395399  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52466 JVNDB-2007-001158 Mozilla Firefox/SeaMonkey のクライアント証明書に関するユーザの動作を追跡される脆弱性 Mozilla Firefox/SeaMonkey には、最小のユーザ対話で TLS クライアント証明書を自動でインストール可能であるため、他のドメインからの TLS クライアント証明書をリクエストされることで、ユーザの動作を追跡される脆弱性が存在します。 CVE-2007-4879 28234 CVE-2007-4879 56969 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001158.html 2007-09-13 2008-06-23 View