Title: Mozilla Multiple Browser XMLHttpRequest Header Spoofing

Unknown or Incomplete

• Security Tracker: 1014954 1014955
• Secunia Advisory ID: 16911 16917 16918 16919 16928 16944 16953 16960 16964 16977 17014 17026 17149 17263 17284 17645
• Related OSVDB ID: 19643 19644 19646 19647 19648 19649
• CVE ID: 2005-2703 (see also: NVD)
• Vendor Specific Advisory URL: ftp://ftp.sco.com/pub/openserver5/507/mp/osr507mp4/osr507mp4.htm ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.49/SCOSA-2005.49.txt http://frontal1.mandriva.com/security/advisories?name=MDKSA-2005:170
  http://slackware.com/security/viewer.php?l=slackware-security&y=2005&m=slackware-security.479350
  http://www.debian.org/security/2005/dsa-866
  http://www.debian.org/security/2005/dsa-868
  http://www.mozilla.org/security/announce/mfsa2005-58.html#xmlhttp
• Other Advisory URL: ftp://patches.sgi.com/support/free/security/advisories/20050903-02-U.asc http://lists.debian.org/debian-security-announce/debian-security-announce-2005/msg00231.html
  http://lists.suse.com/archive/suse-security-announce/2005-Sep/0011.html
  http://www.ubuntu.com/usn/usn-186-1
  http://www.ubuntu.com/usn/usn-200-1
• Vendor Specific News/Changelog Entry: https://bugzilla.mozilla.org/show_bug.cgi?id=297078
  https://bugzilla.mozilla.org/show_bug.cgi?id=302263
• RedHat RHSA: RHSA-2005:785 RHSA-2005:789
• Keyword: SCOSA-2005.49

Unknown or Incomplete