CVE-2006-6077

2006-11-2400:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.134 Low

EPSS

Percentile

95.6%

JSON

The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier;
and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions,
do not properly verify that an ACTION URL in a FORM element containing a
password INPUT element matches the web site for which the user stored a
password, which allows remote attackers to obtain passwords via a password
INPUT element on a different web page located on the web site intended for
this password.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchfirefox< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1UNKNOWN
ubuntu6.10noarchfirefox< 2.0.0.6+0dfsg-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.6+1-0ubuntu1UNKNOWN
ubuntu7.10noarchiceape< 1.1.4-1ubuntu2UNKNOWN
ubuntu7.10noarchlightning-sunbird< 0.5-0ubuntu4UNKNOWN
ubuntu7.10noarchmidbrowser< 0.1.6b-0ubuntu2UNKNOWN
ubuntu7.04noarchxulrunner< 1.8.0.10-3ubuntu1UNKNOWN
ubuntu7.10noarchxulrunner< 1.8.0.10-3ubuntu1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	firefox	< 1.5.dfsg+1.5.0.13~prepatch070731-0ubuntu1	UNKNOWN
ubuntu	6.10	noarch	firefox	< 2.0.0.6+0dfsg-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.6+1-0ubuntu1	UNKNOWN
ubuntu	7.10	noarch	iceape	< 1.1.4-1ubuntu2	UNKNOWN
ubuntu	7.10	noarch	lightning-sunbird	< 0.5-0ubuntu4	UNKNOWN
ubuntu	7.10	noarch	midbrowser	< 0.1.6b-0ubuntu2	UNKNOWN
ubuntu	7.04	noarch	xulrunner	< 1.8.0.10-3ubuntu1	UNKNOWN
ubuntu	7.10	noarch	xulrunner	< 1.8.0.10-3ubuntu1	UNKNOWN