bugtraq - FLEA-2007-0001-1: firefox

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 22 Mar 2007 00:42:32 -0400
From: Foresight Linux Essential Announcement Service <foresight-security-noreply@...esightlinux.org>
To: foresight-security-announce@...ts.rpath.org
Cc: lwn@....net, full-disclosure@...ts.grok.org.uk,
	bugtraq@...urityfocus.com
Subject: FLEA-2007-0001-1: firefox 

Foresight Linux Essential Advisory: 2007-0001-1
Published: 2007-03-22

Rating: Minor

Updated Versions:
     firefox=/foresight.rpath.org@fl:1-devel//1/2.0.0.3-1-1
     group-dist=/foresight.rpath.org@fl:1-devel//1/1.1-0.8-2

References:
     http://www.mozilla.org/security/announce/2007/mfsa2007-11.html

Description:
     Previous versions of the Firefox package were vulnerable to an 
information disclosure issue. Firefox's handling of PASV FTP connections 
could allow a specially crafted server to perform rudimentary port 
scanning on the client machine, giving the FTP server information about 
the client's system. In and of itself, this is not going to cause a 
remote code exploit, but could aid a malicious individual in other attacks.