New Search

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4 when used with certain proxy servers allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon which might not be ignored in some cases or (2) HTTP 1.1 headers through an HTTP 1.0 proxy which are ignored by the proxy but processed by the client.

oval:org.mitre.oval:def:9966

HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4 when used with certain proxy servers allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon which might not be ignored in some cases or (2) HTTP 1.1 headers through an HTTP 1.0 proxy which are ignored by the proxy but processed by the client.

Family:
unix
Status:
ACCEPTED
Platform(s):
  • CentOS Linux 3
  • CentOS Linux 4
  • Red Hat Enterprise Linux 4
  • Oracle Linux 4
  • Red Hat Enterprise Linux 3
Class:
vulnerability
Reference(s):
  • CVE-2006-2786
Product(s):