Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveRedhatCVE-2006-4567
HistorySep 15, 2006 - 6:07 p.m.

CVE-2006-4567

2006-09-1518:07:00
redhat
web.nvd.nist.gov
62
mozilla firefox
thunderbird
cve-2006-4567
security vulnerability
certificate validation
remote attack
dns spoofing

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.019

Percentile

88.6%

JSON

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious certificate for the Mozilla update site, which can then be used to install arbitrary code on the next update.

Affected configurations

Nvd
Node
mozillafirefoxRange≤1.5.0.6
OR
mozillathunderbirdRange≤1.5.0.6
VendorProductVersionCPE
mozillathunderbirdcpe:/a:mozilla:thunderbird::::
mozillafirefoxcpe:/a:mozilla:firefox::::

References

Related

debiancve 1
cvelist 1
nvd 1
securityvulns 1
mozilla 1
ubuntucve 1
veracode 1
nessus 21
openvas 9
redhat 2
oraclelinux 2
centos 2
gentoo 2
ubuntu 3
freebsd 1
suse 1
cert 2
debiancve
debiancve
CVE-2006-4567
2006-09-15 18:07:00
cvelist
cvelist
CVE-2006-4567
2006-09-15 18:00:00
nvd
nvd
CVE-2006-4567
2006-09-15 18:07:00
securityvulns
securityvulns
Microsoft ClickOnce MITM Vulnerabilities
2010-07-19 00:00:00
mozilla
mozilla
Auto-update compromise through DNS and SSL spoofing — Mozilla
2006-09-14 00:00:00
ubuntucve
ubuntucve
CVE-2006-4567
2006-09-15 00:00:00
veracode
veracode
DNS Spoofing
2020-04-10 00:15:10
nessus
nessus
Fedora Core 5 : thunderbird-1.5.0.7-1.fc5 (2006-977)
2007-01-17 00:00:00
CentOS 4 : thunderbird (CESA-2006:0677)
2006-09-22 00:00:00
Mozilla Thunderbird < 1.5.0.7 Multiple Vulnerabilities
2006-09-16 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-352-1)
2022-08-26 00:00:00
Gentoo Security Advisory GLSA 200610-01 (thunderbird)
2008-09-24 00:00:00
Gentoo Security Advisory GLSA 200610-01 (thunderbird)
2008-09-24 00:00:00
redhat
redhat
(RHSA-2006:0677) thunderbird security update
2006-09-15 00:00:00
(RHSA-2006:0675) firefox security update
2006-09-15 00:00:00
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
centos
centos
thunderbird security update
2006-09-15 14:57:35
firefox security update
2006-09-15 14:57:18
gentoo
gentoo
Mozilla Thunderbird: Multiple vulnerabilities
2006-10-04 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-09-28 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2006-09-25 00:00:00
firefox vulnerabilities
2006-09-23 00:00:00
Thunderbird vulnerabilities
2006-09-22 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-09-14 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2006-09-22 13:02:47
cert
cert
OpenSSL SSLv2 client code fails to properly check for NULL
2006-09-28 00:00:00
OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow
2006-09-28 00:00:00

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.019

Percentile

88.6%

JSON
Related for CVE-2006-4567
debiancve1cvelist1nvd1securityvulns1mozilla1ubuntucve1veracode1nessus21openvas9redhat2oraclelinux2centos2gentoo2ubuntu3freebsd1suse1cert2