CVE ID:	CVE-2008-5506
Description:	Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHttpRequest to an attacker-controlled resource that uses a 302 redirect to a resource in a different domain, then reading content from the response, aka "response disclosure."
Test IDs:	1.3.6.1.4.1.25623.1.0.63023   1.3.6.1.4.1.25623.1.0.63025   1.3.6.1.4.1.25623.1.0.63026   1.3.6.1.4.1.25623.1.0.63019   1.3.6.1.4.1.25623.1.0.63009   1.3.6.1.4.1.25623.1.0.63011   1.3.6.1.4.1.25623.1.0.63218
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-5506 https://bugzilla.mozilla.org/show_bug.cgi?id=458248 Debian Security Information: DSA-1697 (Google Search) http://www.debian.org/security/2009/dsa-1697 Debian Security Information: DSA-1704 (Google Search) http://www.debian.org/security/2009/dsa-1704 Debian Security Information: DSA-1707 (Google Search) http://www.debian.org/security/2009/dsa-1707 Debian Security Information: DSA-1696 (Google Search) http://www.debian.org/security/2009/dsa-1696 http://www.mandriva.com/security/advisories?name=MDVSA-2008:245 http://www.mandriva.com/security/advisories?name=MDVSA-2009:012 http://www.mandriva.com/security/advisories?name=MDVSA-2008:244 RedHat Security Advisories: RHSA-2008:1036 http://www.redhat.com/support/errata/RHSA-2008-1036.html RedHat Security Advisories: RHSA-2008:1037 http://www.redhat.com/support/errata/RHSA-2008-1037.html RedHat Security Advisories: RHSA-2009:0002 http://www.redhat.com/support/errata/RHSA-2009-0002.html http://sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-258748-1 http://www.ubuntulinux.org/support/documentation/usn/usn-690-1 http://www.ubuntu.com/usn/usn-690-2 http://www.ubuntulinux.org/support/documentation/usn/usn-690-3 http://www.ubuntu.com/usn/usn-701-1 http://www.ubuntu.com/usn/usn-701-2 BugTraq ID: 32882 http://www.securityfocus.com/bid/32882 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10512 http://www.securitytracker.com/id?1021427 http://secunia.com/advisories/33231 http://secunia.com/advisories/33433 http://secunia.com/advisories/33216 http://secunia.com/advisories/33232 http://secunia.com/advisories/33523 http://secunia.com/advisories/33547 http://secunia.com/advisories/33184 http://secunia.com/advisories/33188 http://secunia.com/advisories/33189 http://secunia.com/advisories/33203 http://secunia.com/advisories/33204 http://secunia.com/advisories/33205 http://secunia.com/advisories/33421 http://secunia.com/advisories/33434 http://secunia.com/advisories/34501 http://secunia.com/advisories/35080 http://secunia.com/advisories/33408 http://secunia.com/advisories/33415 http://www.vupen.com/english/advisories/2009/0977 XForce ISS Database: mozilla-xmlhttprequest-302-info-disclosure(47412) http://xforce.iss.net/xforce/xfdb/47412

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: