NVD

Id
66340  
Name
CVE-2005-0588  
Description
Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, which allows remote attackers to determine the existence of files on the local system.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-03  
Published
2005-05-02  
Modified Date
2013-08-22  
Seq
2005-0588  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
345335 66340 CVE-2005-0588 oval:org.mitre.oval:def:100038  View
345336 66340 CVE-2005-0588 oval:org.mitre.oval:def:10682  View
345337 66340 CVE-2005-0588 GLSA-200503-10  View
345338 66340 CVE-2005-0588 GLSA-200503-30  View
345339 66340 CVE-2005-0588 http://www.mozilla.org/security/announce/mfsa2005-20.html  View
345340 66340 CVE-2005-0588 RHSA-2005:176  View
345341 66340 CVE-2005-0588 RHSA-2005:384  View
345342 66340 CVE-2005-0588 12659  View
345343 66340 CVE-2005-0588 https://bugzilla.mozilla.org/show_bug.cgi?id=271209  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61944 JVNDB-2005-000146 Mozilla 製品における任意のホストから XSLT スタイルシートを取り込まれる脆弱性 ------------ CVE-2005-0588 11792 CVE-2005-0588 66340 5 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000146.html 2005-02-24 2007-04-01 View