Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme available as required by RFC2617, which might cause credentials to be sent in plaintext even if an encrypted channel is available.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the strongest authentication scheme     available as required by RFC2617, which might cause credentials to be sent in plaintext even if an     encrypted channel is available. (CVE-2005-2395)

Note that Nessus relies on the presence of the package as reported by the vendor.

Versions of Mozilla Firefox prior to 1.0.6 contain various security issues that may allow an attacker to execute arbitrary code on the remote host.

Versions of Mozilla Firefox prior to 1.0.5 are affected by various security issues that may allow an attacker to execute arbitrary code on the remote host. 

The remote version of Firefox contains various security issues that may allow an attacker execute arbitrary code on the remote host.

ID	Name	Product	Family	Severity
217027	Linux Distros Unpatched Vulnerability : CVE-2005-2395	Nessus	Misc.	critical
3099	Mozilla Firefox < 1.0.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
3066	Mozilla Firefox < 1.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	high
18689	Firefox < 1.0.6 Multiple Vulnerabilities	Nessus	Windows	high

Detections

Analytics

CVE-2005-2395

critical

Tenable Plugins

critical

high

high

high