CVE-2008-4067: Path Traversal
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4067?
CVE-2008-4067 is classified as a moderate severity vulnerability.
How do I fix CVE-2008-4067?
To mitigate CVE-2008-4067, users should upgrade to Firefox version 2.0.0.17 or later, Thunderbird version 2.0.0.17 or later, or SeaMonkey version 1.1.12 or later.
Which versions of Mozilla software are affected by CVE-2008-4067?
CVE-2008-4067 affects Firefox versions prior to 2.0.0.17, 3.x before 3.0.2, Thunderbird versions before 2.0.0.17, and SeaMonkey versions before 1.1.12.
Is CVE-2008-4067 present on Linux-based systems?
Yes, CVE-2008-4067 is a vulnerability present in affected Mozilla software running on Linux-based systems.
What type of attack does CVE-2008-4067 facilitate?
CVE-2008-4067 allows remote attackers to exploit a directory traversal vulnerability to read arbitrary files via crafted resource URIs.