CVE-2005-0149
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie...
CVE-2005-0149 is a medium vulnerability (CVSS 5.0) in Mozilla, published January 29, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.68%, the 77th percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 1.68%EPSS, 77th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 2 CVEs | before 0:1.0-1.1.EL4 | 0:1.0-1.1.EL4 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
Show 22 moreShow less
| Package | Affected | Fixed |
|---|---|---|
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::as From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::desktop From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::es From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:0.9.2-2.4.3 | 0:0.9.2-2.4.3 |
evolutionRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
evolution-develRed Hat:enterprise_linux:4::ws From an advisory covering 9 CVEs | before 0:2.0.2-14 | 0:2.0.2-14 |
What each source reports
NVD Score used
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
- Record
CVE-2005-0149- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE ListNo score
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
- Record
CVE-2005-0149- Updated
- 2026-11-02
EUVDEUVD-2005-0150No score
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
- Record
EUVD-2005-0150- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2x58-77jw-wgpwNo score
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie...
Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
- Record
GHSA-2x58-77jw-wgpw- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2005-323.html
securityfocus.com/bid/12407
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
secunia.com/advisories/19823
mozilla.org/security/announce/mfsa2005-11.html
Show 55 moreShow less
bugzilla.mozilla.org/show_bug.cgi?id=268107
novell.com/linux/security/advisories/2006_04_25.html
exchange.xforce.ibmcloud.com/vulnerabilities/19172
nvd.nist.gov/vuln/detail/CVE-2005-0149
github.com/advisories/GHSA-2x58-77jw-wgpw
access.redhat.com/errata/RHSA-2005:094
bugzilla.redhat.com/show_bug.cgi?id=146315
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_094.json
cve.org/CVERecord?id=CVE-2005-0146