Lucene search
Mozilla FoundationMFSA2008-31HistoryJul 01, 2008 - 12:00 a.m.
Peer-trusted certs can use alt names to spoof β Mozilla
2008-07-0100:00:00
Mozilla Foundation
www.mozilla.org
19
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Mozilla developer John G. Myers reported a weakness in the trust model used by Mozilla regarding alternate names on self-signed certificates (and those with mismatched names) that if accepted could be used to spoof a secure connection to any other site. This problem was independently reported by Frank Benkstein and Nils Toedtmann.
Related
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2008-31
2008-07-03 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2008-07-03 00:00:00
cve
cve
CVE-2008-2809
2008-07-08 23:41:00
CVE-2007-6590
2007-12-28 21:46:00
prion
prion
Code injection
2008-07-08 23:41:00
Design/Logic Flaw
2007-12-28 21:46:00
veracode
veracode
Spoofing Attack
2020-04-10 00:24:13
ubuntucve
ubuntucve
CVE-2008-2809
2008-07-08 00:00:00
openvas
openvas
Mozilla Thunderbird Multiple Vulnerability July-08 (Linux)
2008-10-07 00:00:00
Mozilla Thunderbird Multiple Vulnerability July-08 (Windows)
2008-10-06 00:00:00
Mozilla Thunderbird Multiple Vulnerabilities July-08 (Linux)
2008-10-07 00:00:00
nessus
nessus
Fedora 8 : thunderbird-2.0.0.16-1.fc8 (2008-6706)
2008-08-08 00:00:00
Slackware 10.2 / 11.0 / 12.0 / 12.1 / current : mozilla-thunderbird (SSA:2008-210-05)
2008-07-29 00:00:00
Mozilla Thunderbird < 2.0.0.16 Multiple Vulnerabilities
2008-07-24 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: thunderbird-2.0.0.16-1.fc8
2008-08-07 23:56:32
[SECURITY] Fedora 9 Update: thunderbird-2.0.0.16-1.fc9
2008-08-07 23:54:31
[SECURITY] Fedora 8 Update: seamonkey-1.1.10-1.fc8
2008-07-09 02:47:28
osv
osv
icedove - several vulnerabilities
2008-07-27 00:00:00
iceweasel - several vulnerabilities
2008-07-11 00:00:00
xulrunner - several vulnerabilities
2008-07-23 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2008-07-25 00:00:00
Firefox vulnerabilities
2008-07-02 00:00:00
debian
debian
[SECURITY] [DSA 1621-1] New icedove packages fix several vulnerabilities
2008-07-27 21:38:47
[SECURITY] [DSA 1607-1] New iceweasel packages fix several vulnerabilities
2008-07-11 16:11:41
[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities
2008-07-23 20:33:58
oraclelinux
oraclelinux
firefox security update
2008-07-02 00:00:00
firefox security update
2008-07-02 00:00:00
seamonkey security update
2008-07-02 00:00:00
redhat
redhat
(RHSA-2008:0569) Critical: firefox security update
2008-07-02 00:00:00
(RHSA-2008:0547) Critical: seamonkey security update
2008-07-02 00:00:00
(RHSA-2008:0549) Critical: firefox security update
2008-07-02 00:00:00
centos
centos
firefox security update
2008-07-02 19:45:20
devhelp, firefox, xulrunner, yelp security update
2008-07-06 14:53:42
seamonkey security update
2008-07-03 00:05:00
suse
suse
remote code execution in MozillaFirefox
2008-07-11 13:26:28
seebug
seebug
Mozilla Firefox 2.0.0.14εε¨ε€δΈͺθΏη¨ζΌζ΄
2008-07-03 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-08-06 00:00:00
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:N/I:P/A:P
0.011 Low
EPSS
Percentile
84.1%
Related for MFSA2008-31