CVE-2008-4067
MEDIUM severity · CVSS 4.3 · Path traversal
4.3CVSS MEDIUM
Summary
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.
Impact & exploitability
Attack vectorNetwork
Attack complexity—
Privileges required—
User interaction—
Confidentiality impact—
Integrity impactNone
Availability impactNone
Exploit probability (EPSS)4%
AV:N/AC:M/Au:N/C:P/I:N/A:N
Affected products we track (1)
Recommendation
Apply the vendor fix in your normal patch cycle. Open any affected product above for its exact safe version.
Additional information
- NVD record
- http://download.novell.com/Download?buildid=WZXONb-tqBw~Advisory
- http://lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.htmlAdvisory
- http://secunia.com/advisories/31984Advisory
- http://secunia.com/advisories/31985Advisory
- http://secunia.com/advisories/31987Advisory
- http://secunia.com/advisories/32007Advisory
- http://secunia.com/advisories/32010Advisory
- http://secunia.com/advisories/32011Advisory