6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.3%
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x
before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to
bypass the same origin policy by causing the browser to issue an
XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect
to a resource in a different domain, then reading content from the
response, aka “response disclosure.”
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
ubuntu | 6.06 | noarch | firefox | < 1.5.dfsg+1.5.0.15~prepatch080614i-0ubuntu1 | UNKNOWN |
ubuntu | 7.10 | noarch | firefox | < 2.0.0.19+nobinonly1-0ubuntu0.7.10.1 | UNKNOWN |
ubuntu | 8.04 | noarch | firefox | < 2.0.0.19+nobinonly1-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 10.04 | noarch | firefox | < 3.0.5+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 10.10 | noarch | firefox | < 3.0.5+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 11.04 | noarch | firefox | < 3.0.5+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 8.04 | noarch | firefox-3.0 | < 3.0.5+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
ubuntu | 8.10 | noarch | firefox-3.0 | < 3.0.5+nobinonly-0ubuntu0.8.10.1 | UNKNOWN |
ubuntu | 9.04 | noarch | firefox-3.0 | < 3.0.5+nobinonly-0ubuntu1 | UNKNOWN |
ubuntu | 6.06 | noarch | mozilla-thunderbird | < 1.5.0.13+1.5.0.15~prepatch080614i-0ubuntu0.6.06.1 | UNKNOWN |
launchpad.net/bugs/cve/CVE-2008-5506
nvd.nist.gov/vuln/detail/CVE-2008-5506
security-tracker.debian.org/tracker/CVE-2008-5506
ubuntu.com/security/notices/USN-690-1
ubuntu.com/security/notices/USN-690-2
ubuntu.com/security/notices/USN-690-3
ubuntu.com/security/notices/USN-701-1
ubuntu.com/security/notices/USN-701-2
www.cve.org/CVERecord?id=CVE-2008-5506