Lucene search

K
ubuntucveUbuntu.comUB:CVE-2005-0588
HistoryMay 02, 2005 - 12:00 a.m.

CVE-2005-0588

2005-05-0200:00:00
ubuntu.com
ubuntu.com
14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.013

Percentile

86.1%

Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include
and xsl:import tags in XSLT stylesheets to the current domain, which allows
remote attackers to determine the existence of files on the local system.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN
ubuntu6.10noarchmozilla< 1.7.12-1.1ubuntu2UNKNOWN

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.013

Percentile

86.1%