CVE-2006-6077
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard...
5.0 Medium
CVE-2006-6077 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published November 24, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.14%, the 82nd percentile. No source names a fixed version.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.14%EPSS, 82nd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
Exploit likelihood
2.14%Down 2.2 points since Feb 4, 2022
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mozilla-firefoxDebian:3.1 From an advisory covering 11 CVEs | before 1.0.4-2sarge17, plus listed versions 1.0.4-21.0.4-2sarge11.0.4-2sarge101.0.4-2sarge111.0.4-2sarge12 Show 10 moreShow less1.0.4-2sarge131.0.4-2sarge141.0.4-2sarge151.0.4-2sarge21.0.4-2sarge31.0.4-2sarge41.0.4-2sarge51.0.4-2sarge61.0.4-2sarge71.0.4-2sarge9 | 1.0.4-2sarge17 |
seamonkeyRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
Show 151 moreShow less
| Package | Affected | Fixed |
|---|---|---|
seamonkey-nss-develRed Hat:enterprise_linux:2.1::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::aw From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-chatRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-js-debuggerRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-mailRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nsprRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nspr-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nssRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkey-nss-develRed Hat:enterprise_linux:2.1::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el2 | 0:1.0.8-0.2.el2 |
seamonkeyRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkeyRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-chatRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-js-debuggerRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-mailRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nsprRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nspr-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nssRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
seamonkey-nss-develRed Hat:enterprise_linux:3::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el3 | 0:1.0.8-0.2.el3 |
devhelpRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::as From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::desktop From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::es From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
devhelpRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
devhelp-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:0.10-0.7.el4 | 0:0.10-0.7.el4 |
seamonkeyRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-chatRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-develRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-dom-inspectorRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-js-debuggerRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
seamonkey-mailRed Hat:enterprise_linux:4::ws From an advisory covering 15 CVEs | before 0:1.0.8-0.2.el4 | 0:1.0.8-0.2.el4 |
thunderbirdRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbirdRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
thunderbird-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefoxRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
firefox-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 14 CVEs | before 0:1.5.0.10-0.1.el4 | 0:1.5.0.10-0.1.el4 |
devhelpRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-develRed Hat:enterprise_linux:5::client_workstation From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelpRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
firefoxRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
yelpRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
devhelpRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
devhelp-develRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:0.12-10.0.1.el5 | 0:0.12-10.0.1.el5 |
firefoxRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
firefox-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:1.5.0.10-2.el5 | 0:1.5.0.10-2.el5 |
yelpRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
yelp-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 13 CVEs | before 0:2.16.0-14.0.1.el5 | 0:2.16.0-14.0.1.el5 |
thunderbirdRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:1.5.0.10-1.el5 | 0:1.5.0.10-1.el5 |
thunderbird-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 13 CVEs | before 0:1.5.0.10-1.el5 | 0:1.5.0.10-1.el5 |
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 661 CVEs | before 92.0-1.2 | 92.0-1.2 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 1860 CVEs | before 128.5.1-1.1 | 128.5.1-1.1 |
What each source reports
NVD Score used
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
- Record
CVE-2006-6077- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Updated
- 2026-11-02
CVE ListNo score
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
- Record
CVE-2006-6077- Updated
- 2026-11-02
EUVDEUVD-2006-6060No score
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
- Record
EUVD-2006-6060- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5j29-gg9r-g9gcNo score
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard...
The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earlier; and the (2) Passcard Manager in Netscape 8.1.2 and possibly other versions, do not properly verify that an ACTION URL in a FORM element containing a password INPUT element matches the web site for which the user stored a password, which allows remote attackers to obtain passwords via a password INPUT element on a different web page located on the web site intended for this password.
- Record
GHSA-5j29-gg9r-g9gc- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10600-1No score
MozillaFirefox-92.0-1.2 on GA media
These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10600-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14572-1No score
firefox-esr-128.5.1-1.1 on GA media
These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14572-1- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
redhat.com/support/errata/RHSA-2007-0078.html
info-svc.com/news/11-21-2006/rcsr1
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10031
secunia.com/advisories/24395
securityfocus.com/archive/1/461336/100/0/threaded
Show 194 moreShow less
security.gentoo.org/glsa/glsa-200703-04.xml
gentoo.org/security/en/glsa/glsa-200703-08.xml
exchange.xforce.ibmcloud.com/vulnerabilities/30470
debian.org/security/2007/dsa-1336
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
securitytracker.com/id?1017271
mozilla.org/security/announce/2007/mfsa2007-02.html
vupen.com/english/advisories/2007/0718
ubuntu.com/usn/usn-428-1
issues.rpath.com/browse/RPL-1103
lists.suse.com/archive/suse-security-announce/2007-Mar/0001.html
novell.com/linux/security/advisories/2007_22_mozilla.html
bugzilla.mozilla.org/show_bug.cgi?id=360493
fedoranews.org/cms/node/2713
mandriva.com/security/advisories?name=MDKSA-2007:050
rhn.redhat.com/errata/RHSA-2007-0077.html
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.338131
nvd.nist.gov/vuln/detail/CVE-2006-6077
github.com/advisories/GHSA-5j29-gg9r-g9gc
access.redhat.com/errata/RHSA-2007:0077
bugzilla.redhat.com/show_bug.cgi?id=204589
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0077.json
cve.org/CVERecord?id=CVE-2006-6077
suse.com/security/cve/CVE-2006-6077
lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3HI2RC7AJAHY74Q6MK7GNGWU6TITB22V
This page doesn't list everything
Left out here: 1,801 references. The JSON record has them.