QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-1238

Back to search

CVE-2008-1238

Published: Mar 27, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.

VendorProductVersions

n/a

n/a

affected
n/a

References

20080327 rPSA-2008-0128-1 firefox
mailing-list
x_refsource_BUGTRAQ
29541
third-party-advisory
x_refsource_SECUNIA
29539
third-party-advisory
x_refsource_SECUNIA
1019703
vdb-entry
x_refsource_SECTRACK
30620
third-party-advisory
x_refsource_SECUNIA
29560
third-party-advisory
x_refsource_SECUNIA
DSA-1532
vendor-advisory
x_refsource_DEBIAN
30327
third-party-advisory
x_refsource_SECUNIA
238492
vendor-advisory
x_refsource_SUNALERT
USN-592-1
vendor-advisory
x_refsource_UBUNTU
29616
third-party-advisory
x_refsource_SECUNIA
29550
third-party-advisory
x_refsource_SECUNIA
29645
third-party-advisory
x_refsource_SECUNIA
29607
third-party-advisory
x_refsource_SECUNIA
ADV-2008-1793
vdb-entry
x_refsource_VUPEN
29558
third-party-advisory
x_refsource_SECUNIA
oval:org.mitre.oval:def:9889
vdb-entry
signature
x_refsource_OVAL
RHSA-2008:0208
vendor-advisory
x_refsource_REDHAT
29526
third-party-advisory
x_refsource_SECUNIA
SUSE-SA:2008:019
vendor-advisory
x_refsource_SUSE
TA08-087A
third-party-advisory
x_refsource_CERT
29391
third-party-advisory
x_refsource_SECUNIA
RHSA-2008:0209
vendor-advisory
x_refsource_REDHAT
28448
vdb-entry
x_refsource_BID
RHSA-2008:0207
vendor-advisory
x_refsource_REDHAT
DSA-1534
vendor-advisory
x_refsource_DEBIAN
29547
third-party-advisory
x_refsource_SECUNIA
GLSA-200805-18
vendor-advisory
x_refsource_GENTOO
ADV-2008-0998
vdb-entry
x_refsource_VUPEN
DSA-1535
vendor-advisory
x_refsource_DEBIAN
MDVSA-2008:080
vendor-advisory
x_refsource_MANDRIVA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now