CVE-2004-0779 | BDVDB-2026-6696 Detail

Description#

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.mandriva.com/security/advisories?name=MDKSA-2004:082
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
http://bugzilla.mozilla.org/show_bug.cgi?id=226278
https://exchange.xforce.ibmcloud.com/vulnerabilities/17018

Exploit#

No public exploit known

History#

Version 12004-08-14Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.