CVE - CVE-2006-1729

CVE-ID
CVE-2006-1729	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Mozilla Firefox 1.x before 1.5.0.2 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0.1 allows remote attackers to read arbitrary files by (1) inserting the target filename into a text box, then turning that box into a file upload control, or (2) changing the type of the input control that is associated with an event handler.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:102550 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1~~ (Obsolete source) MISC:17516 URL:http://www.securityfocus.com/bid/17516 MISC:19631 URL:http://secunia.com/advisories/19631 MISC:19649 URL:http://secunia.com/advisories/19649 MISC:19696 URL:http://secunia.com/advisories/19696 MISC:19714 URL:http://secunia.com/advisories/19714 MISC:19721 URL:http://secunia.com/advisories/19721 MISC:19729 URL:http://secunia.com/advisories/19729 MISC:19746 URL:http://secunia.com/advisories/19746 MISC:19759 URL:http://secunia.com/advisories/19759 MISC:19794 URL:http://secunia.com/advisories/19794 MISC:19811 URL:http://secunia.com/advisories/19811 MISC:19852 URL:http://secunia.com/advisories/19852 MISC:19862 URL:http://secunia.com/advisories/19862 MISC:19863 URL:http://secunia.com/advisories/19863 MISC:19902 URL:http://secunia.com/advisories/19902 MISC:19941 URL:http://secunia.com/advisories/19941 MISC:20060404-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060404-01-U.asc MISC:21033 URL:http://secunia.com/advisories/21033 MISC:21622 URL:http://secunia.com/advisories/21622 MISC:22066 URL:http://secunia.com/advisories/22066 MISC:228526 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1~~ (Obsolete source) MISC:ADV-2006-1356 URL:~~http://www.vupen.com/english/advisories/2006/1356~~ (Obsolete source) MISC:ADV-2006-3391 URL:~~http://www.vupen.com/english/advisories/2006/3391~~ (Obsolete source) MISC:ADV-2006-3748 URL:~~http://www.vupen.com/english/advisories/2006/3748~~ (Obsolete source) MISC:ADV-2008-0083 URL:~~http://www.vupen.com/english/advisories/2008/0083~~ (Obsolete source) MISC:DSA-1044 URL:http://www.debian.org/security/2006/dsa-1044 MISC:DSA-1046 URL:http://www.debian.org/security/2006/dsa-1046 MISC:DSA-1051 URL:http://www.debian.org/security/2006/dsa-1051 MISC:FEDORA-2006-410 URL:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.html MISC:FEDORA-2006-411 URL:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.html MISC:FLSA:189137-1 URL:http://www.securityfocus.com/archive/1/436296/100/0/threaded MISC:FLSA:189137-2 URL:http://www.securityfocus.com/archive/1/436338/100/0/threaded MISC:GLSA-200604-12 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml MISC:GLSA-200604-18 URL:http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml MISC:HPSBUX02153 URL:http://www.securityfocus.com/archive/1/446658/100/200/threaded MISC:MDKSA-2006:075 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:075~~ (Obsolete source) MISC:MDKSA-2006:076 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:076~~ (Obsolete source) MISC:RHSA-2006:0328 URL:http://www.redhat.com/support/errata/RHSA-2006-0328.html MISC:RHSA-2006:0329 URL:http://www.redhat.com/support/errata/RHSA-2006-0329.html MISC:SCOSA-2006.26 URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.26/SCOSA-2006.26.txt MISC:SSRT061181 URL:http://www.securityfocus.com/archive/1/446658/100/200/threaded MISC:SUSE-SA:2006:021 URL:http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.html MISC:SUSE-SA:2006:035 URL:http://www.novell.com/linux/security/advisories/2006_35_mozilla.html MISC:USN-271-1 URL:https://usn.ubuntu.com/271-1/ MISC:USN-275-1 URL:https://usn.ubuntu.com/275-1/ MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm URL:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm MISC:http://www.mozilla.org/security/announce/2006/mfsa2006-23.html URL:http://www.mozilla.org/security/announce/2006/mfsa2006-23.html MISC:mozilla-textbox-file-access(25823) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/25823 MISC:oval:org.mitre.oval:def:10922 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10922 MISC:oval:org.mitre.oval:def:1929 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1929
Assigning CNA
Red Hat, Inc.
Date Record Created
20060412	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20060412)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)