CVE-2004-0779

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via…

published August 14, 2004

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02109 · 81.5th percentile
Published
2004-08-14T04:00Z
EPSS history
Timeline
  • 14 AUG 04:00Z
    The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via…
    cvelistv5