CVE-2005-0149

Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.

• http://secunia.com/advisories/19823
• http://www.mozilla.org/security/announce/mfsa2005-11.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.html
• http://www.redhat.com/support/errata/RHSA-2005-094.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-335.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/12407
• https://bugzilla.mozilla.org/show_bug.cgi?id=268107Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19172
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407
• http://secunia.com/advisories/19823
• http://www.mozilla.org/security/announce/mfsa2005-11.htmlPatch, Vendor Advisory
• http://www.novell.com/linux/security/advisories/2006_04_25.html
• http://www.redhat.com/support/errata/RHSA-2005-094.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-323.htmlPatch, Vendor Advisory
• http://www.redhat.com/support/errata/RHSA-2005-335.htmlPatch, Vendor Advisory
• http://www.securityfocus.com/bid/12407
• https://bugzilla.mozilla.org/show_bug.cgi?id=268107Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19172
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407

Published

Feb 15, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0143Firefox before 1.0 and Mozilla before 1.7.5 display the SSL …
• CVE-2005-0144Firefox before 1.0 and Mozilla before 1.7.5 display the secu…
• CVE-2005-0145Firefox before 1.0 does not properly distinguish between use…
• CVE-2005-0146Firefox before 1.0 and Mozilla before 1.7.5 allow remote att…
• CVE-2005-0147Firefox before 1.0 and Mozilla before 1.7.5, when configured…
• CVE-2005-0148Thunderbird before 0.9, when running on Windows systems, use…
• CVE-2005-0150Firefox before 1.0 allows the user to store a (1) javascript…
• CVE-2005-0151Unknown vulnerability in the installation of Adobe License M…
• CVE-2005-0152PHP remote file inclusion vulnerability in Squirrelmail 1.2.…
• CVE-2005-0155The PerlIO implementation in Perl 5.8.0, when installed with…
• CVE-2005-0156Buffer overflow in the PerlIO implementation in Perl 5.8.0, …
• CVE-2005-0157The confirm add-on in SmartList 3.15 and earlier allows atta…