Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2005-2968
HistorySep 20, 2005 - 10:03 p.m.

CVE-2005-2968

2005-09-2022:03:00
redhat
web.nvd.nist.gov
71
firefox
mozilla
command execution
vulnerability
cve-2005-2968
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.962

Percentile

99.5%

JSON

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.

Affected configurations

Nvd
Node
mozillafirefoxMatch1.0.6linux
OR
mozillamozillaMatch1.7.10linux
VendorProductVersionCPE
mozillafirefox1.0.6cpe:2.3:a:mozilla:firefox:1.0.6:*:linux:*:*:*:*:*
mozillamozilla1.7.10cpe:2.3:a:mozilla:mozilla:1.7.10:*:linux:*:*:*:*:*

References

Related

ubuntu 2
checkpoint_advisories 1
openvas 6
freebsd 1
cvelist 1
nessus 15
nvd 1
cert 1
ubuntucve 1
securityvulns 1
exploitdb 1
centos 2
redhat 2
debian 4
osv 2
ubuntu
ubuntu
Mozilla and Firefox vulnerabilities
2005-09-23 00:00:00
Thunderbird vulnerabilities
2005-10-11 00:00:00
checkpoint_advisories
checkpoint_advisories
Mail Content Firefox Command Line URL Shell Command Injection (CVE-2005-2968)
2009-10-22 00:00:00
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Debian: Security Advisory (DSA-868-1)
2008-01-17 00:00:00
freebsd
freebsd
firefox & mozilla -- command line URL shell command injection
2005-09-06 00:00:00
cvelist
cvelist
CVE-2005-2968
2005-09-20 04:00:00
nessus
nessus
FreeBSD : firefox & mozilla -- command line URL shell command injection (2e28cefb-2aee-11da-a263-0001020eed82)
2006-05-13 00:00:00
Fedora Core 3 : thunderbird-1.0.7-1.1.fc3 (2005-962)
2005-10-05 00:00:00
Fedora Core 4 : thunderbird-1.0.7-1.1.fc4 (2005-963)
2005-10-05 00:00:00
nvd
nvd
CVE-2005-2968
2005-09-20 22:03:00
cert
cert
Mozilla Firefox fails to properly sanitize user-supplied URIs via shell script
2005-09-22 00:00:00
ubuntucve
ubuntucve
CVE-2005-2968
2005-09-20 00:00:00
securityvulns
securityvulns
Firefox Command Line URL Shell Command Injection
2005-09-21 00:00:00
exploitdb
exploitdb
Mozilla Browser/Firefox - Arbitrary Command Execution
2005-09-20 00:00:00
centos
centos
thunderbird security update
2005-10-06 23:10:29
firefox security update
2005-09-22 22:46:14
redhat
redhat
(RHSA-2005:791) thunderbird security update
2005-10-06 00:00:00
(RHSA-2005:785) firefox security update
2005-09-22 00:00:00
debian
debian
[SECURITY] [DSA 866-1] New Mozilla packages fix several vulnerabilities
2005-10-20 05:44:19
[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities
2005-10-20 15:11:33
[SECURITY] [DSA 868-1] New Mozilla Thunderbird packages fix several vulnerabilities
2005-10-20 15:11:33
osv
osv
mozilla-thunderbird - several
2005-10-20 00:00:00
mozilla - several
2005-10-20 00:00:00

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

0.962

Percentile

99.5%

JSON
Related for CVE-2005-2968
ubuntu2checkpoint_advisories1openvas6freebsd1cvelist1nessus15nvd1cert1ubuntucve1securityvulns1exploitdb1centos2redhat2debian4osv2