Catalogo CVE

CVE-2006-6077

firefox-esr-128.5.1-1.1 on GA media

[Catalogo CVE]

Gravità
Sconosciuto
Published
Updated
Source
[NVD] · [CVE record]
EPSS
2.14% · Oct 22, 2026

The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmozilla-firefox3.11.0.4-2vulnerable
Debianmozilla-firefox3.11.0.4-2sarge1vulnerable
Debianmozilla-firefox3.11.0.4-2sarge10vulnerable
Debianmozilla-firefox3.11.0.4-2sarge11vulnerable
Debianmozilla-firefox3.11.0.4-2sarge12vulnerable
Debianmozilla-firefox3.11.0.4-2sarge13vulnerable
Debianmozilla-firefox3.11.0.4-2sarge14vulnerable
Debianmozilla-firefox3.11.0.4-2sarge15vulnerable
Debianmozilla-firefox3.11.0.4-2sarge2vulnerable
Debianmozilla-firefox3.11.0.4-2sarge3vulnerable
Debianmozilla-firefox3.11.0.4-2sarge4vulnerable
Debianmozilla-firefox3.11.0.4-2sarge5vulnerable
Debianmozilla-firefox3.11.0.4-2sarge6vulnerable
Debianmozilla-firefox3.11.0.4-2sarge7vulnerable
Debianmozilla-firefox3.11.0.4-2sarge9vulnerable
Debianmozilla-firefox3.11.0.4-2sarge17fixed
OpensuseMozillaFirefoxtumbleweed92.0-1.2fixed
Opensusefirefox-esrtumbleweed128.5.1-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmozilla-firefoxdeb3.11.0.4-2sarge17Not reportedDSA-1336-1Not reported
OpensuseMozillaFirefoxrpmtumbleweed92.0-1.2Not reportedOPENSUSE-SU-2024:10600-1Not reported
Opensusefirefox-esrrpmtumbleweed128.5.1-1.1Not reportedOPENSUSE-SU-2024:14572-1Not reported

OpenFactory catalog packages

L’associazione dei pacchetti è in corso.

[openSUSE Tumbleweed]

  • [firefox-esr]Sconosciuto

    Pacchetto sorgente: [firefox-esr]

    Dettagli (1)

    • 153.1.0-1.1 · x86_64 · tumbleweed

      Corretta · Corretta: 128.5.1-1.1

      pypi · firefox-esr · opensuse · tumbleweed

  • [firefox-esr-branding-upstream]Sconosciuto

    Pacchetto sorgente: [firefox-esr]

    Dettagli (1)

    • 153.1.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 128.5.1-1.1

      Version impact unknown

      pypi · firefox-esr · opensuse · tumbleweed

  • [firefox-esr-translations-common]Sconosciuto

    Pacchetto sorgente: [firefox-esr]

    Dettagli (1)

    • 153.1.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 128.5.1-1.1

      Version impact unknown

      pypi · firefox-esr · opensuse · tumbleweed

  • [firefox-esr-translations-other]Sconosciuto

    Pacchetto sorgente: [firefox-esr]

    Dettagli (1)

    • 153.1.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 128.5.1-1.1

      Version impact unknown

      pypi · firefox-esr · opensuse · tumbleweed

  • [MozillaFirefox]Sconosciuto

    Pacchetto sorgente: [MozillaFirefox]

    Dettagli (1)

    • 154.0-1.1 · x86_64 · tumbleweed

      Corretta · Corretta: 92.0-1.2

      pypi · MozillaFirefox · opensuse · tumbleweed

  • [MozillaFirefox-branding-upstream]Sconosciuto

    Pacchetto sorgente: [MozillaFirefox]

    Dettagli (1)

    • 154.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 92.0-1.2

      Version impact unknown

      pypi · MozillaFirefox · opensuse · tumbleweed

  • [MozillaFirefox-devel]Sconosciuto

    Pacchetto sorgente: [MozillaFirefox]

    Dettagli (1)

    • 154.0-1.1 · noarch · tumbleweed

      Sconosciuto · Corretta: 92.0-1.2

      Version impact unknown

      pypi · MozillaFirefox · opensuse · tumbleweed

  • [MozillaFirefox-translations-common]Sconosciuto

    Pacchetto sorgente: [MozillaFirefox]

    Dettagli (1)

    • 154.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 92.0-1.2

      Version impact unknown

      pypi · MozillaFirefox · opensuse · tumbleweed

  • [MozillaFirefox-translations-other]Sconosciuto

    Pacchetto sorgente: [MozillaFirefox]

    Dettagli (1)

    • 154.0-1.1 · x86_64 · tumbleweed

      Sconosciuto · Corretta: 92.0-1.2

      Version impact unknown

      pypi · MozillaFirefox · opensuse · tumbleweed

Osservato:

Riferimenti

[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]