Mozilla Browser Cookie Path Restriction Bypass Vulnerability

Mozilla Browser Cookie Path Restriction Bypass Vulnerability

Solution:
The vendor has released an update to address this issue.

SGI have released an advisory (20040402-01-U) and a patch to address this issue in SGI ProPack version 2.3 and 2.4. The vendor has advised that customers apply this patch as soon as possible. Further details regarding obtaining and applying an appropriate patch can be found in the referenced advisory. Patch is linked below.

Mandrake has released an advisory MDKSA-2004:021 to address this issue. Please see the referenced advisory for more information.

Redhat has released advisory RHSA-2004:112-01 dealing with this issue. Please see the reference for more information.

RedHat has released advisory RHSA-2004:110-20 dealing with this issue for their Enterprise linux distribution. The fixes provided are available for members of the Red Hat Network. Please see the referenced advisory for more information and details on obtaining fixes.

HP has released advisory HPSBUX01036-SSRT4722 dealing with this and other issues; fixes have been provided.

SGI has released an advisory (20040506-01-U) with Patch 10075 for SGI
ProPack 3 to address this and other issues. Please see the referenced
advisory for more information.

SCO has released advisory SCOSA-2004.8 addressing this and other issues. Please see the referenced advisory for further information.

The Fedora Legacy project has released advisory FLSA-2004:2089 along with fixes to address multiple issues in RedHat Fedora Core 1, and RedHat Linux 7.3 and 9.0. Please see the referenced advisory for further information.

Mozilla Browser 1.0 RC2

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.0

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.0 RC1

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.0.1

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.0.2

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.1

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.1 Alpha

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.1 Beta

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.2 Beta

HP Mozilla 1.2.1.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.2 Alpha

HP Mozilla 1.2.1.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.2

HP Mozilla 1.2.1.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.2.1

HP Mozilla 1.2.1.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

RedHat galeon-1.2.13-0.9.2.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/galeon-1.2.13-0 .9.2.legacy.i386.rpm

RedHat mozilla-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-1.4.3-0 .9.1.legacy.i386.rpm

RedHat mozilla-chat-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-chat-1. 4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-devel-1 .4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-dom-inspector-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-dom-ins pector-1.4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-js-debugger-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-js-debu gger-1.4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-mail-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-mail-1. 4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-nspr-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-1. 4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-nspr-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nspr-de vel-1.4.3-0.9.1.legacy.i386.rpm

RedHat mozilla-nss-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-1.4 .3-0.9.1.legacy.i386.rpm

RedHat mozilla-nss-devel-1.4.3-0.9.1.legacy.i386.rpm
RedHat Linux 9
http://download.fedoralegacy.org/redhat/9/updates/i386/mozilla-nss-dev el-1.4.3-0.9.1.legacy.i386.rpm

Mozilla Browser 1.3

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.3.1

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.4

HP Mozilla 1.4.00.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

HP Mozilla 1.6.0.00 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Mandrake lib64nspr4-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64nspr4-devel-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64nss3-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake lib64nss3-devel-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake libnspr4-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake libnspr4-devel-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake libnss3-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake libnss3-devel-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-devel-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-devel-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-dom-inspector-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-dom-inspector-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-enigmail-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-enigmail-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-enigmime-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-enigmime-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-irc-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-irc-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-js-debugger-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-js-debugger-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-mail-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-mail-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-spellchecker-1.4-13.2.92mdk.amd64.rpm
Mandrakelinux 9.2/AMD64
http://www.mandrakesecure.net/en/ftp.php

Mandrake mozilla-spellchecker-1.4-13.2.92mdk.i586.rpm
Mandrakelinux 9.2
http://www.mandrakesecure.net/en/ftp.php

Mozilla Mozilla 1.5
http://www.mozilla.org/download.html

Mozilla Browser 1.4.1

HP Mozilla 1.4.00.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

HP Mozilla 1.6.0.00 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

RedHat epiphany-1.0.4-2.4.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/epiphany-1.0.4- 2.4.legacy.i386.rpm

RedHat mozilla-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.4.3-1 .fc1.1.legacy.i386.rpm

RedHat mozilla-chat-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1. 4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1 .4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-dom-inspector-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins pector-1.4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-js-debugger-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-js-debu gger-1.4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-mail-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-mail-1. 4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-nspr-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-1. 4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-nspr-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-de vel-1.4.3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-nss-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-1.4 .3-1.fc1.1.legacy.i386.rpm

RedHat mozilla-nss-devel-1.4.3-1.fc1.1.legacy.i386.rpm
RedHat Fedora Core 1
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-dev el-1.4.3-1.fc1.1.legacy.i386.rpm

Mozilla Browser 1.4.2

HP Mozilla 1.4.00.01 for HP-UX
http://www.hp.com/products1/unix/java/mozilla/index.html

Red Hat mozilla-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-1.4.2-0.9.0.i386.rpm

Red Hat mozilla-chat-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-chat-1.4.2-0.9.0.i386.rp m

Red Hat mozilla-devel-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-devel-1.4.2-0.9.0.i386.r pm

Red Hat mozilla-dom-inspector-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-dom-inspector-1.4.2-0.9. 0.i386.rpm

Red Hat mozilla-js-debugger-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-js-debugger-1.4.2-0.9.0. i386.rpm

Red Hat mozilla-mail-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-mail-1.4.2-0.9.0.i386.rp m

Red Hat mozilla-nspr-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-nspr-1.4.2-0.9.0.i386.rp m

Red Hat mozilla-nspr-devel-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-nspr-devel-1.4.2-0.9.0.i 386.rpm

Red Hat mozilla-nss-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-nss-1.4.2-0.9.0.i386.rpm

Red Hat mozilla-nss-devel-1.4.2-0.9.0.i386.rpm
ftp://updates.redhat.com/9/en/os/i386/mozilla-nss-devel-1.4.2-0.9.0.i3 86.rpm

SGI ProPack 2.3

SGI patch10064.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.3/patch1 0064.tar.gz

SGI ProPack 2.4

SGI patch10064.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/2.4/patch1 0064.tar.gz

SGI ProPack 3.0

SGI patch10075.tar.gz
ftp://patches.sgi.com/support/free/security/patches/ProPack/3/

SCO Open Server 5.0.7

SCO 507mp3_vol.tar
Read the Maintenance Pack 3 Release and Installation Notes atftp://ftp.sco.com/pub/openserver5/507/mp/mp3/osr507mp3.txt
ftp://ftp.sco.com/pub/openserver5/507/mp/mp3/507mp3_vol.tar