CVE-2006-2613

Mozilla Suite 1.7.13, Mozilla Firefox 1.5.0.3 and possibly other versions before before 1.8.0, and Netscape 7.2 and 8.1, and possibly other versions and products, allows remote user-assisted attackers to obtain information such as the installation path by causing exceptions to be thrown and checking the message contents.

• CWE-200

• http://secunia.com/advisories/20244Vendor Advisory
• http://secunia.com/advisories/20255Vendor Advisory
• http://secunia.com/advisories/20256Vendor Advisory
• http://secunia.com/advisories/21532Vendor Advisory
• http://securityreason.com/securityalert/960
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
• http://www.securityfocus.com/archive/1/434696/100/0/threaded
• https://bugzilla.mozilla.org/attachment.cgi?id=164547Exploit
• https://bugzilla.mozilla.org/show_bug.cgi?id=267645Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26667
• http://secunia.com/advisories/20244Vendor Advisory
• http://secunia.com/advisories/20255Vendor Advisory
• http://secunia.com/advisories/20256Vendor Advisory
• http://secunia.com/advisories/21532Vendor Advisory
• http://securityreason.com/securityalert/960
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:143
• http://www.mandriva.com/security/advisories?name=MDKSA-2006:145
• http://www.securityfocus.com/archive/1/434696/100/0/threaded
• https://bugzilla.mozilla.org/attachment.cgi?id=164547Exploit
• https://bugzilla.mozilla.org/show_bug.cgi?id=267645Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26667

Published

May 26, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-2607do_command.c in Vixie cron (vixie-cron) 4.1 does not check t…
• CVE-2006-2608artmedic newsletter 4.1 and possibly other versions, when re…
• CVE-2006-2609artmedic newsletter 4.1.2 and possibly other versions, when …
• CVE-2006-2610Cross-site scripting (XSS) vulnerability in view.php in phpR…
• CVE-2006-2611Cross-site scripting (XSS) vulnerability in includes/Sanitiz…
• CVE-2006-2612Novell Client for Windows 4.8 and 4.9 does not restrict acce…
• CVE-2006-2614Sun N1 System Manager 1.1 for Solaris 10 before patch 121161…
• CVE-2006-2615ping.php in Russcom.Ping allows remote attackers to execute …
• CVE-2006-2616SQL injection vulnerability in the search script in (1) Alst…
• CVE-2006-2617(1) AlstraSoft Web Host Directory 1.2, aka (2) HyperStop Web…
• CVE-2006-2618Cross-site scripting (XSS) vulnerability in (1) AlstraSoft W…
• CVE-2006-2629Race condition in Linux kernel 2.6.15 to 2.6.17, when runnin…