Rapid7 Vulnerability & Exploit Database

MFSA2008-17 SeaMonkey: Privacy issue with SSL Client Authentication (CVE-2007-4879)

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

MFSA2008-17 SeaMonkey: Privacy issue with SSL Client Authentication (CVE-2007-4879)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:P/I:N/A:N)
Published
09/13/2007
Created
07/25/2018
Added
02/03/2012
Modified
02/13/2015

Description

Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install TLS client certificates with minimal user interaction, and automatically sends these certificates when requested, which makes it easier for remote web sites to track user activities across domains by requesting the TLS client certificates from other domains.

Solution(s)

  • mozilla-seamonkey-upgrade-1_1_9

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;