Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2006-2782HistoryJun 02, 2006 - 7:02 p.m.
CVE-2006-2782
2006-06-0219:02:00
Debian Security Bug Tracker
security-tracker.debian.org
20
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.941
Percentile
99.2%
Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitrary files by inserting the target filename into a text box, then turning that box into a file upload control.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 1.5.dfsg+1.5.0.4-1 | firefox_1.5.dfsg+1.5.0.4-1_all.deb |
Related
nvd
nvd
CVE-2006-2782
2006-06-02 19:02:00
CVE-2006-1729
2006-04-14 10:02:00
cve
cve
CVE-2006-2782
2006-06-02 19:02:00
CVE-2006-1729
2006-04-14 10:02:00
prion
prion
Design/Logic Flaw
2006-06-02 19:02:00
Input validation
2006-04-14 10:02:00
ubuntucve
ubuntucve
CVE-2006-2782
2006-06-02 00:00:00
CVE-2006-1729
2006-04-14 00:00:00
cvelist
cvelist
CVE-2006-2782
2006-06-02 19:00:00
CVE-2006-1729
2006-04-14 10:00:00
mozilla
mozilla
File stealing by changing input type (variant) — Mozilla
2006-06-01 00:00:00
File stealing by changing input type — Mozilla
2006-04-13 00:00:00
debiancve
debiancve
CVE-2006-1729
2006-04-14 10:02:00
openvas
openvas
Ubuntu: Security Advisory (USN-296-2)
2022-08-26 00:00:00
Debian: Security Advisory (DSA-1120)
2008-01-17 00:00:00
Ubuntu: Security Advisory (USN-296-1)
2022-08-26 00:00:00
osv
osv
mozilla-firefox - several vulnerabilities
2006-07-23 00:00:00
mozilla - several
2006-07-22 00:00:00
mozilla-thunderbird - several vulnerabilities
2006-08-02 00:00:00
nessus
nessus
Ubuntu 5.04 / 5.10 : firefox, mozilla-firefox vulnerabilities (USN-296-2)
2007-11-10 00:00:00
Ubuntu 5.04 / 5.10 : mozilla vulnerabilities (USN-323-1)
2007-11-10 00:00:00
openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-1585)
2007-10-17 00:00:00
ubuntu
ubuntu
firefox vulnerabilities
2006-06-09 00:00:00
mozilla vulnerabilities
2006-07-26 00:00:00
Firefox vulnerabilities
2006-07-25 00:00:00
securityvulns
securityvulns
[USN-323-1] mozilla vulnerabilities
2006-07-27 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,Seamonkey
2006-06-23 08:11:46
remote code execution in MozillaFirefox,mozilla
2006-04-20 13:13:08
debian
debian
redhat
redhat
(RHSA-2006:0578) seamonkey security update (was mozilla)
2006-07-20 00:00:00
(RHSA-2006:0328) firefox security update
2006-04-14 00:00:00
(RHSA-2006:0329) mozilla security update
2006-04-18 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2006-06-11 00:00:00
Mozilla Firefox: Multiple vulnerabilities
2006-04-23 00:00:00
Mozilla Suite: Multiple vulnerabilities
2006-04-28 00:00:00
centos
centos
galeon, mozilla security update
2006-04-18 23:53:59
firefox security update
2006-04-14 18:00:35
devhelp, mozilla security update
2006-04-18 17:41:36
oraclelinux
oraclelinux
Critical thunderbird security update
2006-12-07 00:00:00
Critical firefox security update
2006-12-07 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2006-04-13 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
EPSS
0.941
Percentile
99.2%
Related for DEBIANCVE:CVE-2006-2782