NVD

Id
63200  
Name
CVE-2006-4567  
Description
Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-15  
Modified Date
2011-03-07  
Seq
2006-4567  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329200 63200 CVE-2006-4567 oval:org.mitre.oval:def:10488  View
329201 63200 CVE-2006-4567 GLSA-200609-19  View
329202 63200 CVE-2006-4567 GLSA-200610-01  View
329203 63200 CVE-2006-4567 1016850  View
329204 63200 CVE-2006-4567 1016851  View
329205 63200 CVE-2006-4567 http://support.avaya.com/elmodocs2/security/ASA-2006-224.htm  View
329206 63200 CVE-2006-4567 MDKSA-2006:168  View
329207 63200 CVE-2006-4567 MDKSA-2006:169  View
329208 63200 CVE-2006-4567 http://www.mozilla.org/security/announce/2006/mfsa2006-58.html  View
329209 63200 CVE-2006-4567 SUSE-SA:2006:054  View
329210 63200 CVE-2006-4567 RHSA-2006:0675  View
329211 63200 CVE-2006-4567 RHSA-2006:0677  View
329212 63200 CVE-2006-4567 20060915 rPSA-2006-0169-1 firefox thunderbird  View
329213 63200 CVE-2006-4567 20042  View
329214 63200 CVE-2006-4567 USN-350-1  View
329215 63200 CVE-2006-4567 USN-351-1  View
329216 63200 CVE-2006-4567 USN-352-1  View
329217 63200 CVE-2006-4567 USN-354-1  View
329218 63200 CVE-2006-4567 ADV-2006-3617  View
329219 63200 CVE-2006-4567 ADV-2006-3748  View
329220 63200 CVE-2006-4567 ADV-2008-0083  View
329221 63200 CVE-2006-4567 HPSBUX02153  View
329222 63200 CVE-2006-4567 mozilla-auto-update-gain-access(28950)  View
329223 63200 CVE-2006-4567 https://issues.rpath.com/browse/RPL-640  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58364 JVNDB-2006-000560 Mozilla 製品の自動更新機能における更新サイトを偽装される脆弱性 Mozilla 製品の自動更新機能には、Mozilla 更新サイトに偽装した偽サイトの証明書 (自己署名) をユーザが受け入れてしまった場合、更新チェック時に Mozilla の更新サイトのなりすましが行われる脆弱性が存在します。 CVE-2006-4567 20669 CVE-2006-4567 63200 2.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000560.html 2006-09-14 2007-04-01 View