Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0588
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0588

2005-05-0200:00:00
ubuntu.com
ubuntu.com
10

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.11 Low

EPSS

Percentile

95.1%

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include
and xsl:import tags in XSLT stylesheets to the current domain, which allows
remote attackers to determine the existence of files on the local system.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.10noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.11 Low

EPSS

Percentile

95.1%