Mozilla Firefox OS CVE-2014-1507 Directory Traversal Vulnerability
BID:66427
Info
Mozilla Firefox OS CVE-2014-1507 Directory Traversal Vulnerability
| Bugtraq ID: | 66427 |
| Class: | Design Error |
| CVE: |
CVE-2014-1507 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 18 2014 12:00AM |
| Updated: | Mar 18 2014 12:00AM |
| Credit: | Ben Turner |
| Vulnerable: |
Mozilla FirefoxOS 0 |
| Not Vulnerable: |
Mozilla FirefoxOS 1.2.2 Mozilla FirefoxOS 1.3 |
Discussion
Mozilla Firefox OS CVE-2014-1507 Directory Traversal Vulnerability
Mozilla Firefox OS is prone to a directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to read or overwrite arbitrary files in the context of the application. This may aid in further attacks.
This issue is fixed in:
FirefoxOS 1.2.2
FirefoxOS 1.3
Note: This issue was previously discussed in BID 66278 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2014-15 through -28 Multiple Vulnerabilities), but has been moved to its own record to better document it.
Mozilla Firefox OS is prone to a directory-traversal vulnerability.
Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to read or overwrite arbitrary files in the context of the application. This may aid in further attacks.
This issue is fixed in:
FirefoxOS 1.2.2
FirefoxOS 1.3
Note: This issue was previously discussed in BID 66278 (Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2014-15 through -28 Multiple Vulnerabilities), but has been moved to its own record to better document it.