CVE-2006-6077 — Mozilla Firefox vulnerability

11 documents6 sources

Severity

5.0MEDIUMNVD

EPSS

3.1%

top 13.28%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox Netscape Navigator

Timeline

PublishedNov 24

Latest updateMay 3

Description

The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

▶NVDmozilla/firefox1.5.0.8+9

▶NVDnetscape/navigator8.1.2

🔴Vulnerability Details

GHSA

GHSA-5j29-gg9r-g9gc: The (1) Password Manager in Mozilla Firefox 2↗2022-05-03

▶

CVEList

CVE-2006-6077: The (1) Password Manager in Mozilla Firefox 2↗2006-11-24

▶

📋Vendor Advisories

Ubuntu

Firefox vulnerabilities↗2007-03-01

▶

Red Hat

security flaw↗2007-02-23

▶

💬Community

Bugzilla

CVE-2006-6077 security flaw↗2018-08-16

▶

Bugzilla

CVE-2007-0775 Multiple Thunderbird flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007↗2007-03-01

▶

Bugzilla

▶

Bugzilla

CVE-2007-0775 Multiple Firefox flaws (CVE-2007-0777, CVE-2007-0994, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-000↗2007-02-26

▶

Bugzilla

CVE-2007-0775 Multiple Seamonkey flaws (CVE-2007-0777, CVE-2007-0995, CVE-2007-0996, CVE-2006-6077, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0008, CVE-2007-0009, CVE-2007-0↗2007-02-23

▶