FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2005-2703

This CVE name corresponds to:

Entered	Topic
2005-09-23	firefox & mozilla -- multiple vulnerabilities

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2005-2703 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2005-2703
Phase	Assigned(20050826)

Description

Firefox before 1.0.7 and Mozilla Suite before 1.7.12 allows remote attackers to modify HTTP headers of XML HTTP requests via XMLHttpRequest, and possibly use the client to exploit vulnerabilities in servers or proxies, including HTTP request smuggling and HTTP request splitting.

References

Source	Reference
CONFIRM	http://www.mozilla.org/security/announce/mfsa2005-58.html
DEBIAN	DSA-868
DEBIAN	DSA-838
DEBIAN	DSA-866
FEDORA	FLSA-2006:168375
MANDRIVA	MDKSA-2005:169
MANDRIVA	MDKSA-2005:170
MANDRIVA	MDKSA-2005:174
REDHAT	RHSA-2005:785
REDHAT	RHSA-2005:789
REDHAT	RHSA-2005:791
SCO	SCOSA-2005.49
SUSE	SUSE-SA:2005:058
UBUNTU	USN-200-1
BID	14923
BID	15495
OVAL	oval:org.mitre.oval:def:10767
VUPEN	ADV-2005-1824
OVAL	oval:org.mitre.oval:def:1089
SECTRACK	1014954
SECUNIA	16911
SECUNIA	16917
SECUNIA	17042
SECUNIA	17090
SECUNIA	17149
SECUNIA	17284
SECUNIA	17026
SECUNIA	17263
SECUNIA	16977
SECUNIA	17014
XF	mozilla-xmlhttprequest-spoofing(22376)