CVE-2004-2657

Mozilla Firefox 1.5.0.1, and possibly other versions, preserves some records of user activity even after uninstalling, which allows local users who share a Windows profile to view the records after a new installation of Firefox, as reported for the list of Passwords Never Saved web sites. NOTE: The vendor has disputed this issue, stating that "The uninstaller is primarily there to uninstall the application. It is not there to uninstall user data. For the moment I will stick by my module-owner decision.

• http://www.securityfocus.com/archive/1/431021/100/0/threaded
• http://www.securityfocus.com/archive/1/431063/100/0/threaded
• https://bugzilla.mozilla.org/show_bug.cgi?id=234680
• https://bugzilla.mozilla.org/show_bug.cgi?id=330884
• http://www.securityfocus.com/archive/1/431021/100/0/threaded
• http://www.securityfocus.com/archive/1/431063/100/0/threaded
• https://bugzilla.mozilla.org/show_bug.cgi?id=234680
• https://bugzilla.mozilla.org/show_bug.cgi?id=330884

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2651Multiple cross-site scripting (XSS) vulnerabilities in YaCy …
• CVE-2004-2652The DecodeTCPOptions function in decode.c in Snort before 2.…
• CVE-2004-2653Unspecified vulnerability in PD9 Software MegaBBS 2.0 and 2.…
• CVE-2004-2654The clientAbortBody function in client_side.c in Squid Web P…
• CVE-2004-2655rdesktop 1.3.1 with xscreensaver 4.14, and possibly other ve…
• CVE-2004-2656Multiple cross-site scripting (XSS) vulnerabilities in Slash…
• CVE-2004-2658resmgr in SUSE CORE 9 does not properly identify terminal na…
• CVE-2004-2659Opera offers an Open button to verify that a user wishes to …
• CVE-2004-2660Memory leak in direct-io.c in Linux kernel 2.6.x before 2.6.…
• CVE-2004-2661Soft3304 04WebServer before 1.41 does not properly check fil…
• CVE-2004-2662Soft3304 04WebServer before 1.41 allows remote attackers to …
• CVE-2004-2663The (1) SetDebugging and (2) RunEgatherer methods in IBM Acc…