CVE-2005-2968 in Firefox

Summary

Firefox 1.0.6 and Mozilla 1.7.10 allows attackers to execute arbitrary commands via shell metacharacters in a URL that is provided to the browser on the command line, which is sent unfiltered to bash.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservation: 09/19/2005
• Disclosure: 09/20/2005
• Moderation: VulDB entry created
• Entries: VDB-1758 (2)
• CPE: ready
• CWE: CWE-269 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.45887
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-2968
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-2968
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-2968/