CVE-2015-0799
published 2015-04-08CVE-2015-0799: The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification…
PriorityP421medium4.3CVSS 2.0
AVNACMAuNCNIPAN
EPSS
1.17%
64.4th percentile
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| canonical | ubuntu_linux | — | — |
| mozilla | firefox | <= 37.0 | — |
| mozilla | firefox | >= 0 < 37.0.1+build1-0ubuntu0.14.04.1 | 37.0.1+build1-0ubuntu0.14.04.1 |
| opensuse | opensuse | — | — |
| opensuse | opensuse | — | — |
CVSS provenance
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv4.3MEDIUM
vendor_redhat4.3MEDIUM
vendor_ubuntu4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Ubuntu
Firefox vulnerability
vendor_ubuntu·2015-04-07·CVSS 4.3
CVE-2015-0799 [MEDIUM] Firefox vulnerability
Title: Firefox vulnerability
Summary: Firefox could be made to bypass SSL certificate verification.
Muneaki Nishimura discovered a flaw in Mozilla's HTTP Alternative Services
implementation which meant SSL certificate verification could be bypassed
in some circumstances. A remote attacker could potentially exploit this to
conduct a machine-in-the-middle attack. (CVE-2015-0799)
Instructions: After a standard system update you need to restart Firefox to make
all the necessary changes.
Red Hat
Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)
vendor_redhat·2015-04-03·CVSS 4.3
CVE-2015-0799 [MEDIUM] Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)
Mozilla: Certificate verification bypass through the HTTP/2 Alt-Svc header (MFSA 2015-44)
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
Statement: This issue does not affect the version of firefox and thunderbird as shipped with Red Hat Enterprise Linux 5, 6 and 7.
Package: firefox (Red Hat Enterprise Linux 5) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 5) - Not affected
Package: firefox (Red Hat Enterprise Linux 6) - Not affected
Package: thunderbird (Red Hat Enterprise Linux 6) - Not affected
Package: firefox (Red Hat Enterprise Linux 7) - Not a
GHSA
GHSA-5mp2-hvxf-rx92: The HTTP Alternative Services feature in Mozilla Firefox before 37
ghsa_unreviewed·2022-05-14
CVE-2015-0799 [MEDIUM] CWE-20 GHSA-5mp2-hvxf-rx92: The HTTP Alternative Services feature in Mozilla Firefox before 37
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
OSV
firefox vulnerability
osv·2015-04-07·CVSS 4.3
CVE-2015-0799 [MEDIUM] firefox vulnerability
firefox vulnerability
Muneaki Nishimura discovered a flaw in Mozilla's HTTP Alternative Services
implementation which meant SSL certificate verification could be bypassed
in some circumstances. A remote attacker could potentially exploit this to
conduct a machine-in-the-middle attack. (CVE-2015-0799)
OSV
CVE-2015-0799: The HTTP Alternative Services feature in Mozilla Firefox before 37
osv·2015-04-06·CVSS 4.3
CVE-2015-0799 [MEDIUM] CVE-2015-0799: The HTTP Alternative Services feature in Mozilla Firefox before 37
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an intended X.509 certificate-verification step for an SSL server by specifying that server in the uri-host field of an Alt-Svc HTTP/2 response header.
No detection rules found.
No public exploits indexed.
http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.htmlhttp://www.mozilla.org/security/announce/2015/mfsa2015-44.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securitytracker.com/id/1032030http://www.ubuntu.com/usn/USN-2557-1https://bugzilla.mozilla.org/show_bug.cgi?id=1148328https://security.gentoo.org/glsa/201512-10http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00003.htmlhttp://www.mozilla.org/security/announce/2015/mfsa2015-44.htmlhttp://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.htmlhttp://www.securitytracker.com/id/1032030http://www.ubuntu.com/usn/USN-2557-1https://bugzilla.mozilla.org/show_bug.cgi?id=1148328https://security.gentoo.org/glsa/201512-10
2015-04-08
Published