Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

Versions of Mozilla Firefox prior to 1.0.6 contain various security issues that may allow an attacker to execute arbitrary code on the remote host.

Versions of Mozilla Firefox prior to 1.0.5 are affected by various security issues that may allow an attacker to execute arbitrary code on the remote host. 

The remote version of Firefox contains various security issues that may allow an attacker execute arbitrary code on the remote host.

Thee remote host is using Firefox.
 The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host.

The remote host is using Firefox. The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host.

ID	Name	Product	Family	Severity
3099	Mozilla Firefox < 1.0.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
3066	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
18689	Firefox < 1.0.6 Multiple Vulnerabilities	Nessus	Windows	high
801217	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
800777	Firefox < 1.0.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

Detections

Analytics

CVE-2005-2395

critical

Tenable Plugins

high

high

high

high

high