Unscored severity · published Aug 18, 2004
CVE-2004-0779
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FI
Firefox · Mozilla
0.8 · source: NVD
FI
Firebird · Firebirdsql
0.7 · source: NVD
MO
Mozilla · Mozilla
1.6 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0779
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0779
bugzilla.mozilla.org
http://bugzilla.mozilla.org/show_bug.cgi?id=226278
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDKSA-2004:082
www.mozilla.org
http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/17018
More from Firefox
10.0
CVE-2019-11708
Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
9.8
CVE-2024-9680
Mozilla Firefox Use-After-Free Vulnerability
9.8
CVE-2010-3765
Mozilla Multiple Products Remote Code Execution Vulnerability
9.6
CVE-2022-26486
Mozilla Firefox Use-After-Free Vulnerability
8.8
CVE-2023-5217
Google Chromium libvpx Heap Buffer Overflow Vulnerability