Gaetan Leurent showed a weakness in APOP authentication. An attacker posing as a trusted server could recover portions of the user's password via multiple authentication attempts. (CVE-2007-1558) 

Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious email, an attacker could execute arbitrary code with the user's privileges. Please note that JavaScript is disabled by default for emails, and it is not recommended to enable it. (CVE-2007-2867, CVE-2007-2868).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 2.0.0.4.

This update provides the latest Thunderbird to correct these issues.

From Red Hat Security Advisory 2007:0401 :

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. (CVE-2007-2867, CVE-2007-2868)

Several denial of service flaws were found in the way Thunderbird handled certain form and cookie data. A malicious website that is able to set arbitrary form and cookie data could prevent Thunderbird from functioning properly. (CVE-2007-1362, CVE-2007-2869)

A flaw was found in the way Thunderbird processed certain APOP authentication requests. By sending certain responses when Thunderbird attempted to authenticate against an APOP server, a remote attacker could potentially acquire certain portions of a user's authentication credentials. (CVE-2007-1558)

A flaw was found in the way Thunderbird displayed certain web content.
A malicious web page could generate content which could overlay user interface elements such as the hostname and security indicators, tricking users into thinking they are visiting a different site.
(CVE-2007-2871)

Users of Thunderbird are advised to apply this update, which contains Thunderbird version 1.5.0.12 that corrects these issues.

The remote Oracle Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2007-0386 advisory.

    [5:1.4.1-12.0.3.el4]
     - fix overflow in gecos field handling (#240176, CVE-2007-2683)

     [5:1.4.1-12.0.2.el4]
     - buildrequire aspell

     [5:1.4.1-12.0.1.el4]
     - validate msgid in APOP authentication (#241201, CVE-2007-1558)
     - fix insecure temp file creation on NFS (#211085, CVE-2006-5297)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote version of Mozilla Thunderbird suffers from various security issues, at least one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

The installed version of SeaMonkey contains various security issues, one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

ID	Name	Product	Family	Published	Updated	Severity
28069	Ubuntu 6.06 LTS / 6.10 / 7.04 : mozilla-thunderbird vulnerabilities (USN-469-1)	Nessus	Ubuntu Local Security Checks	11/10/2007	1/19/2021	high
37483	Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:131)	Nessus	Mandriva Local Security Checks	4/23/2009	1/6/2021	high
67510	Oracle Linux 4 : thunderbird (ELSA-2007-0401)	Nessus	Oracle Linux Local Security Checks	7/12/2013	1/14/2021	high
67505	Oracle Linux 5 : Moderate: / mutt (ELSA-2007-0386)	Nessus	Oracle Linux Local Security Checks	7/12/2013	4/29/2025	high
4072	Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	5/31/2007	3/6/2019	high
4073	SeaMonkey < 1.0.9 / 1.1.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	5/31/2007	3/6/2019	high
801309	Mozilla SeaMonkey < 1.0.9 / 1.1.2 Multiple Vulnerabilities	Log Correlation Engine	Web Clients			high
801361	Mozilla Thunderbird < 1.5.0.12 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients			high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high