CVE-2006-6503: canonical ubuntu_linux 7PK - Security Features

CVSS: 6.8v2.0MediumModified

AliasesDEBIAN-CVE-2006-6503

Published 20-12-2006Last modified 07-08-2024

Some data may be incomplete

1 reference with an unsupported link type was hidden.

Vulnerability summary

CVE-2006-6503 is a medium (CVSS 6.8) 7PK - Security Features vulnerability in canonical ubuntu_linux. EPSS estimates a 4.20% chance of exploitation in the next 30 days, higher than 90.8% of scored vulnerabilities.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

4.20%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 6

DSA-1253-1 DSA-1258-1 DSA-1265-1 RHSA-2006:0758 RHSA-2006:0759 RHSA-2006:0760

Timeline

20-12-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG element to a javascript: URI.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

4.20%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.20% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-2547PK - Security FeaturesSoftware security is not security software. Here we're concerned with topics like authentication, access control, confidentiality, cryptography, and privilege management.

Affected systems

Mozilla3 products

firefox≥ 1.5, < 1.5.0.9 | ≥ 2.0, < 2.0.0.1
seamonkey< 1.0.7
thunderbird< 1.5.0.9

Debian2 products

firefox-esr< 45.0esr-1
debian_linuxEOL3.1 | 4.0

Canonical1 product

ubuntu_linuxEOL5.10 | 6.06 | 6.10

3 vendors · 6 products

References

53 links

www.kb.cert.org/vuls/id/405092Third Party AdvisoryX Refsource CERT VNUS Government Resource
www.securityfocus.com/bid/21668VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/23433Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:010Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/23439Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017414VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/23672Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/5068VDB EntryX Refsource VUPENThird Party Advisory
secunia.com/advisories/23468Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23598Third Party AdvisoryX Refsource SECUNIA

Show all 53 references

rhn.redhat.com/errata/RHSA-2006-0758.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2007/dsa-1265Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/24078Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23692Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-398-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200701-04.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/23282Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/24390Third Party AdvisoryX Refsource SECUNIA
fedoranews.org/cms/node/2297Vendor AdvisoryX Refsource FEDORABroken Link
secunia.com/advisories/23422Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017416VDB EntryX Refsource SECTRACKThird Party Advisory
h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742Vendor AdvisoryX Refsource HPBroken Link
secunia.com/advisories/23591Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23614Third Party AdvisoryX Refsource SECUNIA
rhn.redhat.com/errata/RHSA-2006-0759.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/usn-398-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.vupen.com/english/advisories/2008/0083VDB EntryX Refsource VUPENThird Party Advisory
fedoranews.org/cms/node/2338Vendor AdvisoryX Refsource FEDORABroken Link
secunia.com/advisories/23420Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23440Third Party AdvisoryX Refsource SECUNIA
www.mozilla.org/security/announce/2006/mfsa2006-72.htmlX Refsource CONFIRMVendor Advisory
www.novell.com/linux/security/advisories/2006_80_mozilla.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.securityfocus.com/archive/1/455145/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/23545Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/23618Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200701-03.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10895VDB EntrySignatureX Refsource OVALThird Party Advisory
www.us-cert.gov/cas/techalerts/TA06-354A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource
secunia.com/advisories/23589Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1253Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.debian.org/security/2007/dsa-1258Vendor AdvisoryX Refsource DEBIANThird Party Advisory
issues.rpath.com/browse/RPL-883X Refsource CONFIRMBroken Link
www.securityfocus.com/archive/1/455728/100/200/threadedMailing ListX Refsource BUGTRAQ
www.novell.com/linux/security/advisories/2007_06_mozilla.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/23601Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017415VDB EntryX Refsource SECTRACKThird Party Advisory
secunia.com/advisories/23988Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:011Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/23514Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200701-02.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
rhn.redhat.com/errata/RHSA-2006-0760.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/usn-400-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
security-tracker.debian.org/tracker/CVE-2006-6503Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities