CVE-2009-0358

2009-02-0400:00:00

ubuntu.com

3.3 Low

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:A/AC:L/Au:N/C:P/I:N/A:N

0.0004 Low

EPSS

Percentile

9.3%

JSON

Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1)
no-store and (2) no-cache Cache-Control directives, which allows local
users to obtain sensitive information by using the (a) back button or (b)
history list of the victim’s browser, as demonstrated by reading the
response page of an https POST request.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchfirefox-3.0< 3.0.6+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchfirefox-3.0< 3.0.6+nobinonly-0ubuntu0.8.10.1UNKNOWN
ubuntu8.04noarchxulrunner-1.9< 1.9.0.6+nobinonly-0ubuntu0.8.04.1UNKNOWN
ubuntu8.10noarchxulrunner-1.9< 1.9.0.6+nobinonly-0ubuntu0.8.10.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	8.04	noarch	firefox-3.0	< 3.0.6+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	firefox-3.0	< 3.0.6+nobinonly-0ubuntu0.8.10.1	UNKNOWN
ubuntu	8.04	noarch	xulrunner-1.9	< 1.9.0.6+nobinonly-0ubuntu0.8.04.1	UNKNOWN
ubuntu	8.10	noarch	xulrunner-1.9	< 1.9.0.6+nobinonly-0ubuntu0.8.10.1	UNKNOWN