NVD

Id
57413  
Name
CVE-2007-5337  
Description
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by creating a web page on the target server, in which the web page contains URIs with (1) smb: or (2) sftp: schemes that access other files from the server.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-21  
Modified Date
2011-03-07  
Seq
2007-5337  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293393 57413 CVE-2007-5337 SSRT061181  View
293394 57413 CVE-2007-5337 oval:org.mitre.oval:def:11443  View
293395 57413 CVE-2007-5337 1018837  View
293396 57413 CVE-2007-5337 201516  View
293397 57413 CVE-2007-5337 http://support.novell.com/techcenter/psdb/60eb95b75c76f9fbfcc9a89f99cd8f79.html  View
293398 57413 CVE-2007-5337 DSA-1392  View
293399 57413 CVE-2007-5337 DSA-1396  View
293400 57413 CVE-2007-5337 DSA-1401  View
293401 57413 CVE-2007-5337 GLSA-200711-14  View
293402 57413 CVE-2007-5337 MDKSA-2007:202  View
293403 57413 CVE-2007-5337 http://www.mozilla.org/security/announce/2007/mfsa2007-34.html  View
293404 57413 CVE-2007-5337 SUSE-SA:2007:057  View
293405 57413 CVE-2007-5337 RHSA-2007:0979  View
293406 57413 CVE-2007-5337 RHSA-2007:0980  View
293407 57413 CVE-2007-5337 RHSA-2007:0981  View
293408 57413 CVE-2007-5337 20071026 rPSA-2007-0225-1 firefox  View
293409 57413 CVE-2007-5337 20071029 FLEA-2007-0062-1 firefox  View
293410 57413 CVE-2007-5337 20071029 rPSA-2007-0225-2 firefox thunderbird  View
293411 57413 CVE-2007-5337 26132  View
293412 57413 CVE-2007-5337 USN-536-1  View
293413 57413 CVE-2007-5337 USN-535-1  View
293414 57413 CVE-2007-5337 ADV-2007-3544  View
293415 57413 CVE-2007-5337 ADV-2007-3587  View
293416 57413 CVE-2007-5337 ADV-2008-0083  View
293417 57413 CVE-2007-5337 mozilla-sftp-file-access(37287)  View
293418 57413 CVE-2007-5337 https://bugzilla.mozilla.org/show_bug.cgi?id=381146  View
293419 57413 CVE-2007-5337 https://issues.rpath.com/browse/RPL-1858  View
293420 57413 CVE-2007-5337 FEDORA-2007-3431  View
293421 57413 CVE-2007-5337 FEDORA-2007-2601  View
293422 57413 CVE-2007-5337 FEDORA-2007-2664  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52198 JVNDB-2007-000888 Mozilla Firefox/SeaMonkey における URI に含まれるスキーム処理の不備による任意のファイルを読み込み可能となる脆弱性 gnome-vfs をサポートしている Linux の環境化で動作する Mozilla Firefox および SeaMonkey において、URI に含まれる smb および sftp スキームの処理に不備が存在するために、ユーザがアクセス可能な SSH/sftp サーバ上の任意のファイルの情報を取得される脆弱性が存在します。 CVE-2007-5337 28692 CVE-2007-5337 57413 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000888.html 2007-10-18 2008-01-23 View