FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2004-0760

This CVE name corresponds to:

Entered	Topic
2004-09-22	mozilla -- NULL bytes in FTP URLs

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2004-0760 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2004-0760
Phase	Assigned(20040802)

Description

Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.

References

Source	Reference
CONFIRM	http://bugzilla.mozilla.org/show_bug.cgi?id=250906
FEDORA	FLSA:2089
REDHAT	RHSA-2004:421
SCO	SCOSA-2005.49
SUSE	SUSE-SA:2004:036
BID	15495
OVAL	oval:org.mitre.oval:def:1227
OVAL	oval:org.mitre.oval:def:11090
XF	mozilla-modify-mime-type(16691)