CVE-2006-4310
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a...
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
CVE-2006-4310- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
CVE-2006-4310- Updated
- 2026-11-02
EUVDEUVD-2006-4298 No score
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
EUVD-2006-4298- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-39vq-3f5w-q742 No score
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a...
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
GHSA-39vq-3f5w-q742- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
CVE-2006-4310- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-4310 No score
Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of service (crash) via a crafted FTP response, when attempting to connect with a username and password via the FTP URI.
- Record
DEBIAN-CVE-2006-4310- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefox-esrDebian:12 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:13 |
before 45.0esr-1 | 45.0esr-1 |
firefox-esrDebian:14 |
before 45.0esr-1 | 45.0esr-1 |
mozillaDebian:3.1 From an advisory covering 5 CVEs |
before 2:1.7.8-1sarge8, plus listed versions 2:1.7.8-12:1.7.8-1sarge12:1.7.8-1sarge22:1.7.8-1sarge32:1.7.8-1sarge5 Show 6 moreShow less2:1.7.8-1sarge62:1.7.8-1sarge72:1.7.8-1sarge7.12:1.7.8-1sarge7.2.12:1.7.8-1sarge7.2.22:1.7.8-1sarge7.3.1 |
2:1.7.8-1sarge8 |
mozilla-firefoxDebian:3.1 From an advisory covering 5 CVEs |
before 1.0.4-2sarge13, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge12 Show 7 moreShow less1.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 |
1.0.4-2sarge13 |
mozilla-thunderbirdDebian:3.1 From an advisory covering 5 CVEs |
before 1.0.2-2.sarge1.0.8d.1, plus listed versions 1.0.2-21.0.2-2.sarge1.0.61.0.2-2.sarge1.0.71.0.2-2.sarge1.0.81.0.2-2.sarge1.0.8a1.0.2-2.sarge1.0.8b.11.0.2-2.sarge1.0.8b.21.0.2-2.sarge1.0.8c.1 |
1.0.2-2.sarge1.0.8d.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Novell Identity Manager - Arbitrary Command Execution | 2006-08-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-4310 is a medium vulnerability (CVSS 4.3) in Mozilla Firefox, published August 23, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.15%, the 93rd percentile. Fixed in firefox-esr 45.0esr-1.