CVE-2007-4879

2007-09-1300:00:00

ubuntu.com

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.04 Low

EPSS

Percentile

92.0%

JSON

Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can
automatically install TLS client certificates with minimal user
interaction, and automatically sends these certificates when requested,
which makes it easier for remote web sites to track user activities across
domains by requesting the TLS client certificates from other domains.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchfirefox< 2.0.0.13+0nobinonly-0ubuntu0.6.10UNKNOWN
ubuntu7.04noarchfirefox< 2.0.0.13+0nobinonly-0ubuntu0.7.4UNKNOWN
ubuntu7.10noarchfirefox< 2.0.0.13+1nobinonly-0ubuntu0.7.10UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	firefox	< 2.0.0.13+0nobinonly-0ubuntu0.6.10	UNKNOWN
ubuntu	7.04	noarch	firefox	< 2.0.0.13+0nobinonly-0ubuntu0.7.4	UNKNOWN
ubuntu	7.10	noarch	firefox	< 2.0.0.13+1nobinonly-0ubuntu0.7.10	UNKNOWN