Summary
Muneaki Nishimura discovered a flaw in Mozilla's HTTP Alternative Services
implementation which meant SSL certificate verification could be bypassed
in some circumstances. A remote attacker could potentially exploit this to
conduct a machine-in-the-middle attack. (CVE-2015-0799)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 37.0.1+build1-0ubuntu0.14.04.1 |
Vulnerabilities 1
-
Unscored —
The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 allows man-in-the-middle attackers to bypass an …
References
-
report
https://ubuntu.com/security/CVE-2015-0799