Rapid7 Vulnerability & Exploit Database

MFSA2006-33 Thunderbird: HTTP response smuggling (CVE-2006-2786)

Free InsightVM Trial No credit card necessary
Watch Demo See how it all works
Back to Search

MFSA2006-33 Thunderbird: HTTP response smuggling (CVE-2006-2786)

Severity
3
CVSS
(AV:N/AC:H/Au:N/C:N/I:P/A:N)
Published
06/02/2006
Created
07/25/2018
Added
02/22/2012
Modified
02/13/2015

Description

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.

Solution(s)

  • mozilla-thunderbird-upgrade-1_5_0_4

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;