CVE-2005-0147: High severity Mozilla Firefox vulnerability
Published Jan 29, 2005
·Updated
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.
Affected Software
10 affected components
Mozilla Firefox=0.8
Mozilla Firefox=0.9
Mozilla Firefox=0.9.1
Mozilla Firefox=0.9.2
Mozilla Firefox=0.9.3
Mozilla Mozilla=1.7
Mozilla Mozilla=1.7-rc3
Mozilla Mozilla=1.7.1
Mozilla Mozilla=1.7.2
Mozilla Mozilla=1.7.3
Remediation
Patch Available
Event History
Jan 29, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0147?
CVE-2005-0147 is classified as a medium severity vulnerability allowing the theft of NTLM or SPNEGO credentials.
2
How do I fix CVE-2005-0147?
To fix CVE-2005-0147, upgrade to Firefox version 1.0 or later and Mozilla version 1.7.5 or later.
3
Which versions of Firefox are affected by CVE-2005-0147?
CVE-2005-0147 affects Firefox versions prior to 1.0 including 0.8, 0.9, and 0.9.x.
4
Which versions of Mozilla are affected by CVE-2005-0147?
CVE-2005-0147 affects Mozilla versions prior to 1.7.5 including 1.7, 1.7.1, 1.7.2, and 1.7.3.
5
What kind of attack does CVE-2005-0147 enable?
CVE-2005-0147 enables remote attackers to execute credential theft attacks via manipulated 407 proxy authentication requests.