(PVS) Signatures - Tenable Network Security

Solution: Upgrade to the latest version of Mozilla or Netscape
CVE Not available
Mozilla JavaScript URL Host Spoofing Arbitrary Cookie Disclosure
PVS ID: 1314 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote client allows malicious websites to steal 'cookie' data.\n\nThe
remote host is running a version of the Mozilla browser that may allow script code to
access cookie data associated with arbitrary domains. It has been reported possible to create
a javascript URL which appears to start with a valid domain. Malicious script code may
specify an arbitrary domain, and will be able to access cookie data associated with that
domain.
Solution: Upgrade to Mozilla 1.1 Beta or higher
CVE-2002-2314
Mozilla FTP View URL Title Tag XSS
PVS ID: 1315 FAMILY: SMTP Clients
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a cross-site scripting (XSS) attack.\n\nThe
remote host is running a version of the Mozilla browser that contains a cross-site scripting
vulnerability. When viewing the contents of a FTP site as web content from a ftp:// URL,
the directory name is included in the HTML representation. It is not adequately sanetized
before this occurs. An attacker may embed javascript as this value between opening and
closing "" tags in a FTP URLL
Solution: Upgrade to the latest version of Mozilla or disable Javascript.
CVE-2002-2359
Mozilla OnUnload Referer Information Leakage Race Condition Information Disclosure
PVS ID: 1316 FAMILY: SMTP Clients
Passive Vulnerability Scanner (PVS) Signatures
RISK:
MEDIUM
NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host may give an attacker information useful for future
attacks.\n\nThe remote host is running a version of the Mozilla browser that has a problem
in its implementation of the JavaScript "onUnload" event handler that has the potential to
leak sensitive information to websites. When other pages are launched using the event
handler, the vulnerable client encapsulates the address of the next page that is visited in the
HTTP referer field. The correct behavior is to include the address of the previously visited
page in the HTTP referer field. Using this handler, a webpage can cause the browser to link
information about the next page that was visited.
Family Internet Services 337