MEDIUM
Firefox SSL tampering via non-200 responses to proxy CONNECT requests
Published Jun 12, 2009
6.8
MEDIUMCVSS 2.0
EPSS 2.03%
Description
Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Affected products
No data.
OR
- ≤ 3.0.10
- 0.1
- 0.2
- 0.3
- 0.4
- 0.5
- 0.6
- 0.6.1
- 0.7
- 0.7.1
- 0.8
- 0.9
- 0.9
- 0.9.1
- 0.9.2
- 0.9.3
- 0.9_rc
- 0.10
- 0.10.1
- 1.0
- 1.0
- 1.0.1
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.6
- 1.0.6
- 1.0.7
- 1.0.8
- 1.4.1
- 1.5
- 1.5
- 1.5
- 1.5.0.1
- 1.5.0.2
- 1.5.0.3
- 1.5.0.4
- 1.5.0.5
- 1.5.0.6
- 1.5.0.7
- 1.5.0.8
- 1.5.0.9
- 1.5.0.10
- 1.5.0.11
- 1.5.0.12
- 1.5.1
- 1.5.2
- 1.5.3
- 1.5.4
- 1.5.5
- 1.5.6
- 1.5.7
- 1.5.8
- 1.8
- 2.0
- 2.0
- 2.0
- 2.0
- 2.0
- 2.0.0.1
- 2.0.0.2
- 2.0.0.3
- 2.0.0.4
- 2.0.0.5
- 2.0.0.6
- 2.0.0.7
- 2.0.0.8
- 2.0.0.9
- 2.0.0.10
- 2.0.0.11
- 2.0.0.12
- 2.0.0.13
- 2.0.0.14
- 2.0.0.15
- 2.0.0.16
- 2.0.0.17
- 2.0.0.18
- 2.0.0.19
- 2.0.0.20
- 2.0.0.21
- 2.0_.1
- 2.0_.4
- 2.0_.5
- 2.0_.6
- 2.0_.7
- 2.0_.9
- 2.0_.10
- 2.0_8
- 3.0
- 3.0
- 3.0
- 3.0
- 3.0.1
- 3.0.2
- 3.0.3
- 3.0.4
- 3.0.5
- 3.0.6
- 3.0.7
- 3.0.8
- 3.0.9
- 3.0beta5
- ≤ 1.1.16
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0
- 1.0.1
- 1.0.3
- 1.0.4
- 1.0.6
- 1.0.8
- 1.0.9
- 1.0.99
- 1.1
- 1.1
- 1.1
- 1.1.1
- 1.1.3
- 1.1.5
- 1.1.5
- 1.1.6
- 1.1.7
- 1.1.8
- 1.1.9
- 1.1.10
- 1.1.11
- 1.1.12
- 1.1.13
- 1.1.15
- ≤ 2.0.0.19
- 0.1
- 0.2
- 0.3
- 0.4
- 0.5
- 0.6
- 0.7
- 0.7.1
- 0.7.2
- 0.7.3
- 0.8
- 0.9
- 1.0
- 1.0.1
- 1.0.2
- 1.0.3
- 1.0.4
- 1.0.5
- 1.0.5
- 1.0.6
- 1.0.7
- 1.0.8
- 1.5
- 1.5
- 1.5.0.1
- 1.5.0.2
- 1.5.0.3
- 1.5.0.4
- 1.5.0.5
- 1.5.0.6
- 1.5.0.7
- 1.5.0.8
- 1.5.0.9
- 1.5.0.10
- 1.5.0.11
- 1.5.0.12
- 1.5.0.13
- 1.5.0.14
- 1.5.1
- 1.5.2
- 1.7.1
- 1.7.3
- 2.0.0.0
- 2.0.0.1
- 2.0.0.2
- 2.0.0.3
- 2.0.0.4
- 2.0.0.5
- 2.0.0.6
- 2.0.0.7
- 2.0.0.8
- 2.0.0.9
- 2.0.0.11
- 2.0.0.12
- 2.0.0.13
- 2.0.0.14
- 2.0.0.15
- 2.0.0.16
- 2.0.0.17
- 2.0.0.18
- 2.0_.4
- 2.0_.5
- 2.0_.6
- 2.0_.9
- 2.0_.12
- 2.0_.13
- 2.0_.14
- 2.0_8
No data.
Red Hat Enterprise Linux 4
firefox-0:3.0.11-4.el4
Fixed · RHSA-2009:1095
Red Hat Enterprise Linux 5
firefox-0:3.0.11-2.el5_3
Fixed · RHSA-2009:1095
Red Hat Enterprise Linux 5
thunderbird-0:2.0.0.22-2.el5_3
Fixed · RHSA-2009:1126
Red Hat Enterprise Linux 5
xulrunner-0:1.9.0.11-3.el5_3
Fixed · RHSA-2009:1095
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 4 | firefox-0:3.0.11-4.el4 | Fixed | RHSA-2009:1095 |
| Red Hat Enterprise Linux 5 | firefox-0:3.0.11-2.el5_3 | Fixed | RHSA-2009:1095 |
| Red Hat Enterprise Linux 5 | thunderbird-0:2.0.0.22-2.el5_3 | Fixed | RHSA-2009:1126 |
| Red Hat Enterprise Linux 5 | xulrunner-0:1.9.0.11-3.el5_3 | Fixed | RHSA-2009:1095 |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (38)
- http://osvdb.org/55160 vdb-entryx_refsource_OSVDB
- http://research.microsoft.com/apps/pubs/default.aspx?id=79323 x_refsource_MISC
- http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf x_refsource_MISC
- http://secunia.com/advisories/35331 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35415 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35431 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35439 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35440 third-party-advisoryx_refsource_SECUNIAVendor Advisory
- http://secunia.com/advisories/35468 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35536 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35561 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35602 third-party-advisoryx_refsource_SECUNIA
- http://secunia.com/advisories/35882 third-party-advisoryx_refsource_SECUNIA
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468 vendor-advisoryx_refsource_SLACKWARE
- http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408 vendor-advisoryx_refsource_SLACKWARE
- http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1 vendor-advisoryx_refsource_SUNALERT
- http://www.debian.org/security/2009/dsa-1820 vendor-advisoryx_refsource_DEBIAN
- http://www.debian.org/security/2009/dsa-1830 vendor-advisoryx_refsource_DEBIAN
- http://www.mandriva.com/security/advisories?name=MDVSA-2009:141 vendor-advisoryx_refsource_MANDRIVA
- http://www.mozilla.org/security/announce/2009/mfsa2009-27.html x_refsource_CONFIRMVendor Advisory
- http://www.redhat.com/support/errata/RHSA-2009-1126.html vendor-advisoryx_refsource_REDHAT
- http://www.securityfocus.com/bid/35326 vdb-entryx_refsource_BID
- http://www.securityfocus.com/bid/35380 vdb-entryx_refsource_BID
- http://www.securitytracker.com/id?1022396 vdb-entryx_refsource_SECTRACK
- http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275 vendor-advisoryx_refsource_SLACKWARE
- http://www.ubuntu.com/usn/usn-782-1 vendor-advisoryx_refsource_UBUNTU
- http://www.vupen.com/english/advisories/2009/1572 vdb-entryx_refsource_VUPENPatchVendor Advisory
- https://access.redhat.com/security/cve/CVE-2009-1836 Vendor Advisory
- https://bugzilla.mozilla.org/show_bug.cgi?id=479880 x_refsource_CONFIRMExploit
- https://bugzilla.redhat.com/show_bug.cgi?id=503578 x_refsource_CONFIRMExploitIssue Tracking
- https://nvd.nist.gov/vuln/detail/CVE-2009-1836
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764 vdb-entrysignaturex_refsource_OVAL
- https://rhn.redhat.com/errata/RHSA-2009-1095.html vendor-advisoryx_refsource_REDHATPatch
- https://www.cve.org/CVERecord?id=CVE-2009-1836
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html vendor-advisoryx_refsource_FEDORA
- https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html vendor-advisoryx_refsource_FEDORA
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jun 12, 2009
Updated Aug 7, 2024
Reserved May 29, 2009
Link CVE-2009-1836
CISA Vulnrichment
Updated n/a