关于 CVE-2005-0590 的漏洞信息

1. 漏洞描述
From NVD
The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to use InstallTrigger to spoof the hostname of the host performing the installation via a long "user:pass" sequence in the URL, which appears before the real hostname.
From 神龙GPT (AIGC)
在Firefox 1.0.1之前,Thunderbird 1.0.1之前,Mozilla 1.7.6之前,Firefox 1.0.1之前的浏览器中,安装确认对话框允许远程攻击者使用InstallTrigger来欺骗主机名,通过在URL中的长“user:pass”序列,在真实主机名之前显示。
2. 漏洞评分(CVSS)
From NVD
NVD 暂无评分
From 神龙GPT (AIGC)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3. 漏洞类别
From NVD
NVD 暂无漏洞类别信息
From 神龙GPT (AIGC)
神龙GPT 暂无漏洞类别信息(请耐心等待)
Reference