CVE-2005-2395 | BDVDB-2026-11747 Detail
Description#
Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.osvdb.org/19002
- https://bugzilla.mozilla.org/show_bug.cgi?id=281851
- http://securityreason.com/securityalert/8
- http://www.securityfocus.com/archive/1/405666
- http://www.securiteam.com/securitynews/5PP0L00GUQ.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22272
- http://www.securityfocus.com/bid/14325
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.