Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.

The remote host is using a version of the Galeon web browser that may allow a rogue web server to determine the existence of files on the side of the client.

The remote host is using a version of the Netscape web browser that may allow a rogue web server to determine the existence of files on the side of the client. 

Versions of Mozilla Firefox prior to 1.0rc2 may allow a rogue web server to determine the existence of files on the side of the client. 

The remote host is running a version of the Mozilla browser that could allow a remote attacker to detect the existence of files on the local file system of the web client accessing the attackers page. The vulnerability is caused by improper handling of embedded Cascading Style-Sheet (CSS) <LINK> elements in the broswer.

Updated Mozilla packages are now available for Red Hat Linux Advanced Server. These new packages fix vulnerabilities in previous versions of Mozilla.

Mozilla is an open source Web browser. Versions of Mozilla prior to version 1.0.1 contain various security vulnerabilities. These vulnerabilities could be used by an attacker to read data off of the local hard drive, to gain information that should normally be kept private, and in some cases to execute arbitrary code. For more information on the specific vulnerabilities fixed please see the references below.

All users of Mozilla should update to these errata packages containing Mozilla version 1.0.1 which is not vulnerable to these issues.

ID	Name	Product	Family	Severity
1750	Galeon < 1.2.2 Local File Detection	Nessus Network Monitor	Web Clients	medium
1749	Netscape < 6.2.3 Local File Detection	Nessus Network Monitor	Web Clients	medium
1748	Mozilla Firefox < 1.0rc2 Local File Detection	Nessus Network Monitor	Web Clients	medium
1311	Netscape/Mozilla/Galeon Local File Enumeration (deprecated)	Nessus Network Monitor	SMTP Clients	low
12361	RHEL 2.1 : mozilla (RHSA-2003:046)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2002-0594

medium

Tenable Plugins

medium

medium

medium

low

high