7.8 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:C/I:N/A:N
0.003 Low
EPSS
Percentile
69.7%
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and
3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12
allows remote attackers to bypass “restrictions imposed on local HTML
files,” and obtain sensitive information and prompt users to write this
information into a file, via directory traversal sequences in a resource:
URI.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | firefox | < 1.5.dfsg+1.5.0.15~prepatch080614e-0ubuntu3 | UNKNOWN |
ubuntu | 7.04 | noarch | firefox | < 2.0.0.17+0nobinonly-0ubuntu0.7.4 | UNKNOWN |
ubuntu | 7.10 | noarch | firefox | < 2.0.0.17+1nobinonly-0ubuntu0.7.10 | UNKNOWN |
ubuntu | 8.04 | noarch | firefox | < 2.0.0.17+1nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 10.04 | noarch | firefox | < 3.0.3+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 10.10 | noarch | firefox | < 3.0.3+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 11.04 | noarch | firefox | < 3.0.3+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 8.04 | noarch | firefox-3.0 | < 3.0.3+build1+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 8.10 | noarch | firefox-3.0 | < 3.0.3+build1+nobinonly-0ubuntu1 | UNKNOWN |
ubuntu | 9.04 | noarch | firefox-3.0 | < 3.0.3+build1+nobinonly-0ubuntu1 | UNKNOWN |