NVD

Id
66345  
Name
CVE-2005-0593  
Description
Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does not finish loading, which shows the lock of the previous site, (2) a non-HTTP server that uses SSL, which causes the lock to be displayed when the SSL handshake is completed, or (3) a URL that generates an HTTP 204 error, which updates the icon and location information but does not change the display of the original site.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2005-03-04  
Modified Date
2010-08-21  
Seq
2005-0593  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
345383 66345 CVE-2005-0593 oval:org.mitre.oval:def:100044  View
345384 66345 CVE-2005-0593 oval:org.mitre.oval:def:9533  View
345385 66345 CVE-2005-0593 GLSA-200503-10  View
345386 66345 CVE-2005-0593 GLSA-200503-30  View
345387 66345 CVE-2005-0593 http://www.mozilla.org/security/announce/mfsa2005-14.html  View
345388 66345 CVE-2005-0593 RHSA-2005:176  View
345389 66345 CVE-2005-0593 RHSA-2005:384  View
345390 66345 CVE-2005-0593 12659  View
345391 66345 CVE-2005-0593 https://bugzilla.mozilla.org/show_bug.cgi?id=258048  View
345392 66345 CVE-2005-0593 https://bugzilla.mozilla.org/show_bug.cgi?id=268483  View
345393 66345 CVE-2005-0593 https://bugzilla.mozilla.org/show_bug.cgi?id=276720  View
345394 66345 CVE-2005-0593 https://bugzilla.mozilla.org/show_bug.cgi?id=277564  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
61948 JVNDB-2005-000150 Mozilla 製品における「安全なサイト」を示す鍵アイコンやセキュリティ証明書の表示を偽装される脆弱性 ------------ CVE-2005-0593 11797 CVE-2005-0593 66345 2.6 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000150.html 2005-02-24 2007-04-01 View