CVE-2009-3983

Severity

68%

Complexity

86%

Confidentiality

106%

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.

Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.

CVSS 2.0 Base Score 6.8. CVSS Attack Vector: network. CVSS Attack Complexity: medium. CVSS Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P).

Overview

Type

Mozilla

First reported 15 years ago

2009-12-17 17:30:00

Last updated 7 years ago

2017-09-19 01:29:00

Affected Software

Mozilla Firefox 0.1

0.1

Mozilla Firefox 0.2

0.2

Mozilla Firefox 0.3

0.3

Mozilla Firefox 0.4

0.4

Mozilla Firefox 0.5

0.5

Mozilla Firefox 0.6

0.6

Mozilla Firefox 0.6.1

0.6.1

Mozilla Firefox 0.7

0.7

Mozilla Firefox 0.7.1

0.7.1

Mozilla Firefox 0.8

0.8

Mozilla Firefox 0.9

0.9

Mozilla Firefox 0.9 rc

0.9

Mozilla Firefox 0.9.1

0.9.1

Mozilla Firefox 0.9.2

0.9.2

Mozilla Firefox 0.9.3

0.9.3

Mozilla Firefox 0.10

0.10

Mozilla Firefox 0.10.1

0.10.1

Mozilla Firefox 1.0

1.0

Mozilla Firefox 1.0 Preview Release

1.0

Mozilla Firefox 1.0.1

1.0.1

Mozilla Firefox 1.0.2

1.0.2

Mozilla Firefox 1.0.3

1.0.3

Mozilla Firefox 1.0.4

1.0.4

Mozilla Firefox 1.0.5

1.0.5

Mozilla Firefox 1.0.6

1.0.6

Mozilla Firefox 1.0.7

1.0.7

Mozilla Firefox 1.0.8

1.0.8

Mozilla Firefox 1.4.1

1.4.1

Mozilla Firefox 1.5

1.5

Mozilla Firefox 1.5 Beta 1

1.5

Mozilla Firefox 1.5 Beta 2

1.5

Mozilla Firefox 1.5.0.1

1.5.0.1

Mozilla Firefox 1.5.0.2

1.5.0.2

Mozilla Firefox 1.5.0.3

1.5.0.3

Mozilla Firefox 1.5.0.4

1.5.0.4

Mozilla Firefox 1.5.0.5

1.5.0.5

Mozilla Firefox 1.5.0.6

1.5.0.6

Mozilla Firefox 1.5.0.7

1.5.0.7

Mozilla Firefox 1.5.0.8

1.5.0.8

Mozilla Firefox 1.5.0.9

1.5.0.9

Mozilla Firefox 1.5.0.10

1.5.0.10

Mozilla Firefox 1.5.0.11

1.5.0.11

Mozilla Firefox 1.5.0.12

1.5.0.12

Mozilla Firefox 1.5.1

1.5.1

Mozilla Firefox 1.5.2

1.5.2

Mozilla Firefox 1.5.3

1.5.3

Mozilla Firefox 1.5.4

1.5.4

Mozilla Firefox 1.5.5

1.5.5

Mozilla Firefox 1.5.6

1.5.6

Mozilla Firefox 1.5.7

1.5.7

Mozilla Firefox 1.5.8

1.5.8

Mozilla Firefox 1.8

1.8

Mozilla Firefox 2.0

2.0

Mozilla Firefox 2.0.0.1

2.0.0.1

Mozilla Firefox 2.0.0.2

2.0.0.2

Mozilla Firefox 2.0.0.3

2.0.0.3

Mozilla Firefox 2.0.0.4

2.0.0.4

Mozilla Firefox 2.0.0.5

2.0.0.5

Mozilla Firefox 2.0.0.6

2.0.0.6

Mozilla Firefox 2.0.0.7

2.0.0.7

Mozilla Firefox 2.0.0.8

2.0.0.8

Mozilla Firefox 2.0.0.9

2.0.0.9

Mozilla Firefox 2.0.0.10

2.0.0.10

Mozilla Firefox 2.0.0.11

2.0.0.11

Mozilla Firefox 2.0.0.12

2.0.0.12

Mozilla Firefox 2.0.0.13

2.0.0.13

Mozilla Firefox 2.0.0.14

2.0.0.14

Mozilla Firefox 2.0.0.15

2.0.0.15

Mozilla Firefox 2.0.0.16

2.0.0.16

Mozilla Firefox 2.0.0.17

2.0.0.17

Mozilla Firefox 2.0.0.18

2.0.0.18

Mozilla Firefox 2.0.0.19

2.0.0.19

Mozilla Firefox 2.0.0.20

2.0.0.20

Mozilla Firefox 3.0

3.0

Mozilla Firefox 3.0 Beta 2

3.0

Mozilla Firefox 3.0.1

3.0.1

Mozilla Firefox 3.0.2

3.0.2

Mozilla Firefox 3.0.3

3.0.3

Mozilla Firefox 3.0.4

3.0.4

Mozilla Firefox 3.0.5

3.0.5

Mozilla Firefox 3.0.6

3.0.6

Mozilla Firefox 3.0.7

3.0.7

Mozilla Firefox 3.0.8

3.0.8

Mozilla Firefox 3.0.9

3.0.9

Mozilla Firefox 3.0.10

3.0.10

Mozilla Firefox 3.0.11

3.0.11

Mozilla Firefox 3.0.12

3.0.12

Mozilla Firefox 3.0.13

3.0.13

Mozilla Firefox 3.0.14

3.0.14

Mozilla Firefox

Mozilla Firefox 3.5.1

3.5.1

Mozilla Firefox 3.5.2

3.5.2

Mozilla Firefox 3.5.3

3.5.3

Mozilla Firefox 3.5.4

3.5.4

Mozilla Firefox 3.5.5

3.5.5

Mozilla SeaMonkey 1.0

1.0

Mozilla SeaMonkey 1.0 alpha

1.0

Mozilla SeaMonkey 1.0 beta

1.0

Mozilla SeaMonkey 1.0.1

1.0.1

Mozilla SeaMonkey 1.0.2

1.0.2

Mozilla SeaMonkey 1.0.3

1.0.3

Mozilla SeaMonkey 1.0.4

1.0.4

Mozilla SeaMonkey 1.0.5

1.0.5

Mozilla SeaMonkey 1.0.6

1.0.6

Mozilla SeaMonkey 1.0.7

1.0.7

Mozilla SeaMonkey 1.0.8

1.0.8

Mozilla SeaMonkey 1.0.9

1.0.9

Mozilla SeaMonkey 1.1

1.1

Mozilla SeaMonkey 1.1 alpha

1.1

Mozilla SeaMonkey 1.1 beta

1.1

Mozilla Seamonkey 1.1.1

1.1.1

Mozilla Seamonkey 1.1.2

1.1.2

Mozilla Seamonkey 1.1.3

1.1.3

Mozilla Seamonkey 1.1.4

1.1.4

Mozilla Seamonkey 1.1.5

1.1.5

Mozilla Seamonkey 1.1.6

1.1.6

Mozilla Seamonkey 1.1.7

1.1.7

Mozilla SeaMonkey 1.1.8

1.1.8

Mozilla SeaMonkey 1.1.9

1.1.9

Mozilla SeaMonkey 1.1.10

1.1.10

Mozilla SeaMonkey 1.1.11

1.1.11

Mozilla SeaMonkey 1.1.12

1.1.12

Mozilla SeaMonkey 1.1.13

1.1.13

Mozilla SeaMonkey 1.1.14

1.1.14

Mozilla SeaMonkey 1.1.15

1.1.15

Mozilla SeaMonkey 1.1.16

1.1.16

Mozilla SeaMonkey 1.1.17

1.1.17

Mozilla SeaMonkey 1.5.0.8

1.5.0.8

Mozilla SeaMonkey 1.5.0.9

1.5.0.9

Mozilla SeaMonkey 1.5.0.10

1.5.0.10

Mozilla SeaMonkey 2.0

2.0

Mozilla SeaMonkey 2.0 Alpha 1

2.0

Mozilla SeaMonkey 2.0 Alpha 2

2.0

Mozilla SeaMonkey 2.0 Alpha 3

2.0

Mozilla SeaMonkey 2.0 Beta 1

2.0

Mozilla SeaMonkey 2.0 Beta 2

2.0

Mozilla SeaMonkey 2.0 RC1

2.0

Mozilla Thunderbird

References

SUSE-SR:2010:013

37699

Vendor Advisory

37703

Vendor Advisory

37704

Vendor Advisory

37785

Vendor Advisory

37813

37856

37881

38977

39001

1023340

1023341

DSA-1956

http://www.mozilla.org/security/announce/2009/mfsa2009-68.html

Patch, Vendor Advisory

SUSE-SA:2009:063

37349

37366

USN-873-1

USN-874-1

USN-915-1

ADV-2009-3547

Patch, Vendor Advisory

ADV-2010-0648

https://bugzilla.mozilla.org/show_bug.cgi?id=487872

https://bugzilla.redhat.com/show_bug.cgi?id=546720

firefox-ntlm-reflection(54807)

oval:org.mitre.oval:def:10047

oval:org.mitre.oval:def:8240

RHSA-2009:1673

RHSA-2009:1674

FEDORA-2009-13333

FEDORA-2009-13362

FEDORA-2009-13366

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.