CVE-2009-3983

Description (CNA)

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.

Affected (CNA)

CWE

No CWE identifiers supplied.

References

• http://secunia.com/advisories/37704
• http://secunia.com/advisories/37699
• http://secunia.com/advisories/39001
• http://www.vupen.com/english/advisories/2009/3547
• http://secunia.com/advisories/37703
• http://www.vupen.com/english/advisories/2010/0648
• http://secunia.com/advisories/37881
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html
• http://secunia.com/advisories/37785
• http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
• http://www.ubuntu.com/usn/USN-874-1
• http://secunia.com/advisories/37813
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html
• http://www.ubuntu.com/usn/USN-873-1
• http://secunia.com/advisories/38977
• http://securitytracker.com/id?1023341
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8240
• http://securitytracker.com/id?1023340
• http://www.securityfocus.com/bid/37349
• https://rhn.redhat.com/errata/RHSA-2009-1674.html
• https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html
• http://www.debian.org/security/2009/dsa-1956
• http://secunia.com/advisories/37856
• https://rhn.redhat.com/errata/RHSA-2009-1673.html
• http://www.securityfocus.com/bid/37366
• http://www.ubuntu.com/usn/USN-915-1
• http://www.mozilla.org/security/announce/2009/mfsa2009-68.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54807
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10047
• http://www.novell.com/linux/security/advisories/2009_63_firefox.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=487872
• https://bugzilla.redhat.com/show_bug.cgi?id=546720

ADP enrichment