NVD

Id
61471  
Name
CVE-2006-2786  
Description
HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-06-02  
Modified Date
2011-03-07  
Seq
2006-2786  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
317943 61471 CVE-2006-2786 oval:org.mitre.oval:def:9966  View
317944 61471 CVE-2006-2786 RHSA-2006:0609  View
317945 61471 CVE-2006-2786 1016202  View
317946 61471 CVE-2006-2786 1016214  View
317947 61471 CVE-2006-2786 DSA-1118  View
317948 61471 CVE-2006-2786 DSA-1120  View
317949 61471 CVE-2006-2786 DSA-1134  View
317950 61471 CVE-2006-2786 GLSA-200606-12  View
317951 61471 CVE-2006-2786 GLSA-200606-21  View
317952 61471 CVE-2006-2786 MDKSA-2006:143  View
317953 61471 CVE-2006-2786 MDKSA-2006:145  View
317954 61471 CVE-2006-2786 http://www.mozilla.org/security/announce/2006/mfsa2006-33.html  View
317955 61471 CVE-2006-2786 SUSE-SA:2006:035  View
317956 61471 CVE-2006-2786 RHSA-2006:0578  View
317957 61471 CVE-2006-2786 RHSA-2006:0594  View
317958 61471 CVE-2006-2786 RHSA-2006:0610  View
317959 61471 CVE-2006-2786 RHSA-2006:0611  View
317960 61471 CVE-2006-2786 20060602 rPSA-2006-0091-1 firefox thunderbird  View
317961 61471 CVE-2006-2786 HPSBUX02156  View
317962 61471 CVE-2006-2786 SSRT061181  View
317963 61471 CVE-2006-2786 18228  View
317964 61471 CVE-2006-2786 USN-296-1  View
317965 61471 CVE-2006-2786 USN-296-2  View
317966 61471 CVE-2006-2786 USN-297-1  View
317967 61471 CVE-2006-2786 USN-323-1  View
317968 61471 CVE-2006-2786 ADV-2006-2106  View
317969 61471 CVE-2006-2786 ADV-2006-3748  View
317970 61471 CVE-2006-2786 ADV-2006-3749  View
317971 61471 CVE-2006-2786 ADV-2008-0083  View
317972 61471 CVE-2006-2786 mozilla-http-response-smuggling(26844)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58130 JVNDB-2006-000326 Mozilla 製品における HTTP レスポンスを不正に挿入される脆弱性 Mozilla Firefox には特定のプロキシサーバを使用した場合に、ヘッダ名とコロンの間に空白文字を含む HTTP ヘッダの処理に不備が存在し、1 つの長いレスポンスを 2 つの短いレスポンスとして解釈してしまうため HTTP レスポンスを不正に挿入できる脆弱性が存在します。 CVE-2006-2786 18888 CVE-2006-2786 61471 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000326.html 2006-06-01 2007-04-01 View