CVE-2009-3983

Mozilla NTLM reflection vulnerability

Published Dec 17, 2009 CVSS 2.0 · 6.8 Medium EPSS 2.2% KEV · Not listed
Description
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-1956-1 New xulrunner packages fix several vulnerabilities
EUVD EUVD EUVD-2009-3954 Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
Ubuntu USN Ubuntu USN USN-873-1 Firefox 3.0 and Xulrunner 1.9 vulnerabilities
Ubuntu USN Ubuntu USN USN-874-1 Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities
Ubuntu USN Ubuntu USN USN-915-1 Thunderbird vulnerabilities
References
Link Providers
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html cve-icon cve-icon
http://secunia.com/advisories/37699 cve-icon cve-icon
http://secunia.com/advisories/37703 cve-icon cve-icon
http://secunia.com/advisories/37704 cve-icon cve-icon
http://secunia.com/advisories/37785 cve-icon cve-icon
http://secunia.com/advisories/37813 cve-icon cve-icon
http://secunia.com/advisories/37856 cve-icon cve-icon
http://secunia.com/advisories/37881 cve-icon cve-icon
http://secunia.com/advisories/38977 cve-icon cve-icon
http://secunia.com/advisories/39001 cve-icon cve-icon
http://securitytracker.com/id?1023340 cve-icon cve-icon
http://securitytracker.com/id?1023341 cve-icon cve-icon
http://www.debian.org/security/2009/dsa-1956 cve-icon cve-icon
http://www.mozilla.org/security/announce/2009/mfsa2009-68.html cve-icon cve-icon
http://www.novell.com/linux/security/advisories/2009_63_firefox.html cve-icon cve-icon
http://www.securityfocus.com/bid/37349 cve-icon cve-icon
http://www.securityfocus.com/bid/37366 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-873-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-874-1 cve-icon cve-icon
http://www.ubuntu.com/usn/USN-915-1 cve-icon cve-icon
http://www.vupen.com/english/advisories/2009/3547 cve-icon cve-icon
http://www.vupen.com/english/advisories/2010/0648 cve-icon cve-icon
https://bugzilla.mozilla.org/show_bug.cgi?id=487872 cve-icon cve-icon
https://bugzilla.redhat.com/show_bug.cgi?id=546720 cve-icon cve-icon
https://exchange.xforce.ibmcloud.com/vulnerabilities/54807 cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2009-3983 cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10047 cve-icon cve-icon
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8240 cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2009-1673.html cve-icon cve-icon
https://rhn.redhat.com/errata/RHSA-2009-1674.html cve-icon cve-icon
https://www.cve.org/CVERecord?id=CVE-2009-3983 cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00995.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01034.html cve-icon cve-icon
https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01041.html cve-icon cve-icon
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 6:45 AM
Reserved
Nov 19, 2009, 12:00 AM
Status
Modified
Published
Dec 17, 2009, 5:30 PM
Modified
Jun 16, 2026, 11:12 PM
Severity
Moderate
Public date
Dec 15, 2009, 12:00 AM