CVE-2007-4879
6.2 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.04 Low
EPSS
Percentile
92.0%
Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.
References
0x90.eu/ff_tls_poc.html
lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
secunia.com/advisories/29526
secunia.com/advisories/29539
secunia.com/advisories/29541
secunia.com/advisories/29547
secunia.com/advisories/29558
secunia.com/advisories/29560
secunia.com/advisories/29616
secunia.com/advisories/29645
secunia.com/advisories/30327
secunia.com/advisories/30620
sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1
wiki.rpath.com/wiki/Advisories:rPSA-2008-0128
www.debian.org/security/2008/dsa-1532
www.debian.org/security/2008/dsa-1534
www.debian.org/security/2008/dsa-1535
www.gentoo.org/security/en/glsa/glsa-200805-18.xml
www.mandriva.com/security/advisories?name=MDVSA-2008:080
www.mozilla.org/security/announce/2008/mfsa2008-17.html
www.securityfocus.com/archive/1/490196/100/0/threaded
www.securityfocus.com/bid/28448
www.securitytracker.com/id?1019704
www.ubuntu.com/usn/usn-592-1
www.us-cert.gov/cas/techalerts/TA08-087A.html
www.vupen.com/english/advisories/2008/0998/references
www.vupen.com/english/advisories/2008/1793/references
bugzilla.mozilla.org/show_bug.cgi?id=395399
Related
6.2 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.04 Low
EPSS
Percentile
92.0%