ByteOS Network

▼Common Vulnerabilities and Exposures (CVE)

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:12 Jun, 2009 | 21:07

Updated At:07 Aug, 2024 | 05:27

▼CVE Numbering Authority (CNA)

Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2009/1572	vdb-entry x_refsource_VUPEN
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275	vendor-advisory x_refsource_SLACKWARE
http://www.debian.org/security/2009/dsa-1830	vendor-advisory x_refsource_DEBIAN
http://secunia.com/advisories/35536	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/35602	third-party-advisory x_refsource_SECUNIA
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764	vdb-entry signature x_refsource_OVAL
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html	vendor-advisory x_refsource_FEDORA
http://www.securityfocus.com/bid/35326	vdb-entry x_refsource_BID
http://www.mozilla.org/security/announce/2009/mfsa2009-27.html	x_refsource_CONFIRM
http://secunia.com/advisories/35440	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html	vendor-advisory x_refsource_FEDORA
http://www.ubuntu.com/usn/usn-782-1	vendor-advisory x_refsource_UBUNTU
http://secunia.com/advisories/35431	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html	vendor-advisory x_refsource_FEDORA
http://secunia.com/advisories/35331	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/35468	third-party-advisory x_refsource_SECUNIA
http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf	x_refsource_MISC
http://secunia.com/advisories/35439	third-party-advisory x_refsource_SECUNIA
http://secunia.com/advisories/35882	third-party-advisory x_refsource_SECUNIA
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html	vendor-advisory x_refsource_FEDORA
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141	vendor-advisory x_refsource_MANDRIVA
http://secunia.com/advisories/35415	third-party-advisory x_refsource_SECUNIA
https://rhn.redhat.com/errata/RHSA-2009-1095.html	vendor-advisory x_refsource_REDHAT
http://www.securityfocus.com/bid/35380	vdb-entry x_refsource_BID
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468	vendor-advisory x_refsource_SLACKWARE
http://secunia.com/advisories/35561	third-party-advisory x_refsource_SECUNIA
https://bugzilla.redhat.com/show_bug.cgi?id=503578	x_refsource_CONFIRM
http://osvdb.org/55160	vdb-entry x_refsource_OSVDB
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408	vendor-advisory x_refsource_SLACKWARE
http://www.debian.org/security/2009/dsa-1820	vendor-advisory x_refsource_DEBIAN
http://www.redhat.com/support/errata/RHSA-2009-1126.html	vendor-advisory x_refsource_REDHAT
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1	vendor-advisory x_refsource_SUNALERT
http://www.securitytracker.com/id?1022396	vdb-entry x_refsource_SECTRACK
http://research.microsoft.com/apps/pubs/default.aspx?id=79323	x_refsource_MISC
https://bugzilla.mozilla.org/show_bug.cgi?id=479880	x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2009/1572

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://www.debian.org/security/2009/dsa-1830

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://secunia.com/advisories/35536

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/35602

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764

Resource:

vdb-entry

signature

x_refsource_OVAL

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.securityfocus.com/bid/35326

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://www.mozilla.org/security/announce/2009/mfsa2009-27.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://secunia.com/advisories/35440

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.ubuntu.com/usn/usn-782-1

Resource:

vendor-advisory

x_refsource_UBUNTU

Hyperlink: http://secunia.com/advisories/35431

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://secunia.com/advisories/35331

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/35468

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf

Resource:

x_refsource_MISC

Hyperlink: http://secunia.com/advisories/35439

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://secunia.com/advisories/35882

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:141

Resource:

vendor-advisory

x_refsource_MANDRIVA

Hyperlink: http://secunia.com/advisories/35415

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://rhn.redhat.com/errata/RHSA-2009-1095.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://www.securityfocus.com/bid/35380

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://secunia.com/advisories/35561

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=503578

Resource:

x_refsource_CONFIRM

Hyperlink: http://osvdb.org/55160

Resource:

vdb-entry

x_refsource_OSVDB

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408

Resource:

vendor-advisory

x_refsource_SLACKWARE

Hyperlink: http://www.debian.org/security/2009/dsa-1820

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1126.html

Resource:

vendor-advisory

x_refsource_REDHAT

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1

Resource:

vendor-advisory

x_refsource_SUNALERT

Hyperlink: http://www.securitytracker.com/id?1022396

Resource:

vdb-entry

x_refsource_SECTRACK

Hyperlink: http://research.microsoft.com/apps/pubs/default.aspx?id=79323

Resource:

x_refsource_MISC

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=479880

Resource:

x_refsource_CONFIRM

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.vupen.com/english/advisories/2009/1572	vdb-entry x_refsource_VUPEN x_transferred
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.debian.org/security/2009/dsa-1830	vendor-advisory x_refsource_DEBIAN x_transferred
http://secunia.com/advisories/35536	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/35602	third-party-advisory x_refsource_SECUNIA x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764	vdb-entry signature x_refsource_OVAL x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.securityfocus.com/bid/35326	vdb-entry x_refsource_BID x_transferred
http://www.mozilla.org/security/announce/2009/mfsa2009-27.html	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/35440	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.ubuntu.com/usn/usn-782-1	vendor-advisory x_refsource_UBUNTU x_transferred
http://secunia.com/advisories/35431	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html	vendor-advisory x_refsource_FEDORA x_transferred
http://secunia.com/advisories/35331	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/35468	third-party-advisory x_refsource_SECUNIA x_transferred
http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf	x_refsource_MISC x_transferred
http://secunia.com/advisories/35439	third-party-advisory x_refsource_SECUNIA x_transferred
http://secunia.com/advisories/35882	third-party-advisory x_refsource_SECUNIA x_transferred
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141	vendor-advisory x_refsource_MANDRIVA x_transferred
http://secunia.com/advisories/35415	third-party-advisory x_refsource_SECUNIA x_transferred
https://rhn.redhat.com/errata/RHSA-2009-1095.html	vendor-advisory x_refsource_REDHAT x_transferred
http://www.securityfocus.com/bid/35380	vdb-entry x_refsource_BID x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468	vendor-advisory x_refsource_SLACKWARE x_transferred
http://secunia.com/advisories/35561	third-party-advisory x_refsource_SECUNIA x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=503578	x_refsource_CONFIRM x_transferred
http://osvdb.org/55160	vdb-entry x_refsource_OSVDB x_transferred
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408	vendor-advisory x_refsource_SLACKWARE x_transferred
http://www.debian.org/security/2009/dsa-1820	vendor-advisory x_refsource_DEBIAN x_transferred
http://www.redhat.com/support/errata/RHSA-2009-1126.html	vendor-advisory x_refsource_REDHAT x_transferred
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1	vendor-advisory x_refsource_SUNALERT x_transferred
http://www.securitytracker.com/id?1022396	vdb-entry x_refsource_SECTRACK x_transferred
http://research.microsoft.com/apps/pubs/default.aspx?id=79323	x_refsource_MISC x_transferred
https://bugzilla.mozilla.org/show_bug.cgi?id=479880	x_refsource_CONFIRM x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2009/1572

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275

Resource:

vendor-advisory

x_refsource_SLACKWARE

x_transferred

Hyperlink: http://www.debian.org/security/2009/dsa-1830

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://secunia.com/advisories/35536

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/35602

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.securityfocus.com/bid/35326

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://www.mozilla.org/security/announce/2009/mfsa2009-27.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://secunia.com/advisories/35440

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.ubuntu.com/usn/usn-782-1

Resource:

vendor-advisory

x_refsource_UBUNTU

x_transferred

Hyperlink: http://secunia.com/advisories/35431

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://secunia.com/advisories/35331

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/35468

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf

Resource:

x_refsource_MISC

x_transferred

Hyperlink: http://secunia.com/advisories/35439

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://secunia.com/advisories/35882

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2009:141

Resource:

vendor-advisory

x_refsource_MANDRIVA

x_transferred

Hyperlink: http://secunia.com/advisories/35415

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://rhn.redhat.com/errata/RHSA-2009-1095.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://www.securityfocus.com/bid/35380

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468

Resource:

vendor-advisory

x_refsource_SLACKWARE

x_transferred

Hyperlink: http://secunia.com/advisories/35561

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=503578

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://osvdb.org/55160

Resource:

vdb-entry

x_refsource_OSVDB

x_transferred

Hyperlink: http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408

Resource:

vendor-advisory

x_refsource_SLACKWARE

x_transferred

Hyperlink: http://www.debian.org/security/2009/dsa-1820

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: http://www.redhat.com/support/errata/RHSA-2009-1126.html

Resource:

vendor-advisory

x_refsource_REDHAT

x_transferred

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1

Resource:

vendor-advisory

x_refsource_SUNALERT

x_transferred

Hyperlink: http://www.securitytracker.com/id?1022396

Resource:

vdb-entry

x_refsource_SECTRACK

x_transferred

Hyperlink: http://research.microsoft.com/apps/pubs/default.aspx?id=79323

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://bugzilla.mozilla.org/show_bug.cgi?id=479880

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink	Source	Resource
http://osvdb.org/55160	secalert@redhat.com	N/A
http://research.microsoft.com/apps/pubs/default.aspx?id=79323	secalert@redhat.com	N/A
http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf	secalert@redhat.com	N/A
http://secunia.com/advisories/35331	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/35415	secalert@redhat.com	N/A
http://secunia.com/advisories/35431	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/35439	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/35440	secalert@redhat.com	Vendor Advisory
http://secunia.com/advisories/35468	secalert@redhat.com	N/A
http://secunia.com/advisories/35536	secalert@redhat.com	N/A
http://secunia.com/advisories/35561	secalert@redhat.com	N/A
http://secunia.com/advisories/35602	secalert@redhat.com	N/A
http://secunia.com/advisories/35882	secalert@redhat.com	N/A
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.372468	secalert@redhat.com	N/A
http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.425408	secalert@redhat.com	N/A
http://sunsolve.sun.com/search/document.do?assetkey=1-66-264308-1	secalert@redhat.com	N/A
http://www.debian.org/security/2009/dsa-1820	secalert@redhat.com	N/A
http://www.debian.org/security/2009/dsa-1830	secalert@redhat.com	N/A
http://www.mandriva.com/security/advisories?name=MDVSA-2009:141	secalert@redhat.com	N/A
http://www.mozilla.org/security/announce/2009/mfsa2009-27.html	secalert@redhat.com	Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2009-1126.html	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/35326	secalert@redhat.com	N/A
http://www.securityfocus.com/bid/35380	secalert@redhat.com	N/A
http://www.securitytracker.com/id?1022396	secalert@redhat.com	N/A
http://www.slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.454275	secalert@redhat.com	N/A
http://www.ubuntu.com/usn/usn-782-1	secalert@redhat.com	N/A
http://www.vupen.com/english/advisories/2009/1572	secalert@redhat.com	Patch Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=479880	secalert@redhat.com	Exploit
https://bugzilla.redhat.com/show_bug.cgi?id=503578	secalert@redhat.com	Exploit
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11764	secalert@redhat.com	N/A
https://rhn.redhat.com/errata/RHSA-2009-1095.html	secalert@redhat.com	Patch
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00444.html	secalert@redhat.com	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00504.html	secalert@redhat.com	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00574.html	secalert@redhat.com	N/A
https://www.redhat.com/archives/fedora-package-announce/2009-June/msg00657.html	secalert@redhat.com	N/A

CVE-2009-1836

Credits

Vendors

Products

Metrics (CVSS)

Weaknesses

Attack Patterns

Solution/Workaround

References

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

Stakeholder-Specific Vulnerability Categorization (SSVC)

Affected Products

Affected

Problem Types

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

Affected Products

Metrics

Metrics Other Info

Impacts

Solutions

Configurations

Workarounds

Exploits

Credits

Timeline

Replaced By

Rejected Reason

References

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History

Similar CVEs