CVE-2005-0590

Publication date 2 May 2005

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long “user:pass” sequence in the URL, which appears before the real hostname.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
mozilla 7.10 gutsy Not in release
7.04 feisty Not in release
6.10 edgy Ignored end of life, was needed
6.06 LTS dapper
Not affected
mozilla-thunderbird 7.10 gutsy Not in release
7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

    • USN-149-3
    • Ubuntu 4.10 update for Firefox vulnerabilities
    • 28 July 2005

Other references