lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
 
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 22 Mar 2007 00:42:32 -0400
From: Foresight Linux Essential Announcement Service
	<foresight-security-noreply@...esightlinux.org>
To: foresight-security-announce@...ts.rpath.org
Cc: lwn@....net, full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: FLEA-2007-0001-1: firefox

Foresight Linux Essential Advisory: 2007-0001-1
Published: 2007-03-22

Rating: Minor

Updated Versions:
     firefox=/foresight.rpath.org@fl:1-devel//1/2.0.0.3-1-1
     group-dist=/foresight.rpath.org@fl:1-devel//1/1.1-0.8-2

References:
     http://www.mozilla.org/security/announce/2007/mfsa2007-11.html

Description:
     Previous versions of the Firefox package were vulnerable to an 
information disclosure issue. Firefox's handling of PASV FTP connections 
could allow a specially crafted server to perform rudimentary port 
scanning on the client machine, giving the FTP server information about 
the client's system. In and of itself, this is not going to cause a 
remote code exploit, but could aid a malicious individual in other attacks.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists