Lucene search
Ubuntu.comUB:CVE-2011-0059HistoryMar 02, 2011 - 12:00 a.m.
CVE-2011-0059
2011-03-0200:00:00
ubuntu.com
ubuntu.com
11
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.004
Percentile
72.4%
Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before
3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote
attackers to hijack the authentication of arbitrary users for requests that
were initiated by a plugin and received a 307 redirect to a page on a
different web site.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 10.04 | noarch | firefox | < 3.6.14+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | firefox | < 3.6.14+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | firefox-3.0 | < 3.6.14+build3+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | firefox-3.5 | < 3.6.14+build3+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 8.04 | noarch | xulrunner-1.9.2 | < 1.9.2.14+build3+nobinonly-0ubuntu0.8.04.1 | UNKNOWN |
| ubuntu | 9.10 | noarch | xulrunner-1.9.2 | < 1.9.2.14+build3+nobinonly-0ubuntu0.9.10.1 | UNKNOWN |
| ubuntu | 10.04 | noarch | xulrunner-1.9.2 | < 1.9.2.14+build3+nobinonly-0ubuntu0.10.04.1 | UNKNOWN |
| ubuntu | 10.10 | noarch | xulrunner-1.9.2 | < 1.9.2.14+build3+nobinonly-0ubuntu0.10.10.1 | UNKNOWN |
Related
mozilla
mozilla
CSRF risk with plugins and 307 redirects — Mozilla
2011-03-01 00:00:00
cve
cve
CVE-2011-0059
2011-03-02 20:00:01
veracode
veracode
Cross-site Request Forgery (CSRF)
2020-04-10 00:54:22
nvd
nvd
CVE-2011-0059
2011-03-02 20:00:01
cvelist
cvelist
CVE-2011-0059
2011-03-02 19:00:00
prion
prion
Cross site request forgery (csrf)
2011-03-02 20:00:00
securityvulns
securityvulns
Mozilla Foundation Security Advisory 2011-10
2011-03-03 00:00:00
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2011-03-03 00:00:00
nessus
nessus
Oracle Linux 4 : seamonkey (ELSA-2011-0313)
2013-07-12 00:00:00
CentOS 4 : seamonkey (CESA-2011:0313)
2011-03-03 00:00:00
RHEL 4 : seamonkey (RHSA-2011:0313)
2011-03-02 00:00:00
centos
centos
seamonkey security update
2011-03-03 05:16:12
firefox security update
2011-03-03 05:18:19
openvas
openvas
CentOS Update for seamonkey CESA-2011:0313 centos4 i386
2011-03-07 00:00:00
CentOS Update for seamonkey CESA-2011:0313 centos4 i386
2011-03-07 00:00:00
RedHat Update for seamonkey RHSA-2011:0313-01
2011-03-07 00:00:00
oraclelinux
oraclelinux
seamonkey security update
2011-03-02 00:00:00
firefox security and bug fix update
2011-03-02 00:00:00
redhat
redhat
(RHSA-2011:0313) Critical: seamonkey security update
2011-03-01 00:00:00
(RHSA-2011:0310) Critical: firefox security and bug fix update
2011-03-01 00:00:00
osv
osv
iceweasel - several
2011-03-09 00:00:00
iceape - several
2011-03-03 00:00:00
icedove - several
2011-03-09 00:00:00
debian
debian
[BSA-027] Security Update for iceweasel
2011-03-12 08:28:24
[SECURITY] [DSA 2187-1] icedove security update
2011-03-09 21:12:07
[SECURITY] [DSA 2180-1] iceape security update
2011-03-03 22:12:20
ubuntu
ubuntu
Firefox and Xulrunner regression
2011-03-07 00:00:00
Firefox and Xulrunner vulnerabilities
2011-03-03 00:00:00
Xulrunner vulnerabilities
2011-04-30 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2011-03-01 00:00:00
suse
suse
remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey
2011-03-15 12:02:21
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS
0.004
Percentile
72.4%
Related for UB:CVE-2011-0059