NVD

Id
68087  
Name
CVE-2005-2395  
Description
Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2005-07-27  
Modified Date
2017-07-10  
Seq
2005-2395  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
352010 68087 CVE-2005-2395 8  View
352011 68087 CVE-2005-2395 http://www.securiteam.com/securitynews/5PP0L00GUQ.html  View
352012 68087 CVE-2005-2395 20050719 Mozilla cleartext credentials leak bug report to excuse myself (Re[2]: NTLM HTTP Authentication is insecure by design - a new writeup by Amit Klein)  View
352013 68087 CVE-2005-2395 14325  View
352014 68087 CVE-2005-2395 mozilla-authentication-weakness(22272)  View
352015 68087 CVE-2005-2395 https://bugzilla.mozilla.org/show_bug.cgi?id=281851  View

Related JVN