medium6.8
CVE-2009-3983
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applicati…
Impact
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mozilla | Firefox | through 3.0.15 Versions 0.1, 0.2, 0.3, 0.4, 0.5 |
| Mozilla | Seamonkey | through 2.0 Versions 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4 |
| Mozilla | Thunderbird | All versions |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- http://secunia.com/advisories/37699
- http://secunia.com/advisories/37703
- http://secunia.com/advisories/37704
- http://secunia.com/advisories/37785
- http://secunia.com/advisories/37813
- http://secunia.com/advisories/37856
- http://secunia.com/advisories/37881
- http://secunia.com/advisories/38977
- http://secunia.com/advisories/39001
- http://securitytracker.com/id?1023340
- http://securitytracker.com/id?1023341
- http://www.debian.org/security/2009/dsa-1956
- http://www.mozilla.org/security/announce/2009/mfsa2009-68.html
- http://www.novell.com/linux/security/advisories/2009_63_firefox.html
- http://www.securityfocus.com/bid/37349
- http://www.securityfocus.com/bid/37366
- http://www.ubuntu.com/usn/USN-873-1
- http://www.ubuntu.com/usn/USN-874-1
- http://www.ubuntu.com/usn/USN-915-1
- http://www.vupen.com/english/advisories/2009/3547
- http://www.vupen.com/english/advisories/2010/0648
- https://bugzilla.mozilla.org/show_bug.cgi?id=487872
- https://bugzilla.redhat.com/show_bug.cgi?id=546720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54807