CVE-2011-0082

The X.509 certificate validation functionality in Mozilla Firefox 4.0.x through 4.0.1 does not properly implement single-session security exceptions, which might make it easier for user-assisted remote attackers to spoof an SSL server via an untrusted certificate that triggers potentially unwanted local caching of documents from that server.

• CWE-20

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627552Exploit
• http://openwall.com/lists/oss-security/2011/05/31/14Exploit
• http://openwall.com/lists/oss-security/2011/05/31/18Exploit
• http://openwall.com/lists/oss-security/2011/05/31/4Exploit
• http://openwall.com/lists/oss-security/2011/05/31/9Exploit
• http://www.securityfocus.com/bid/48064
• https://bugzilla.mozilla.org/show_bug.cgi?id=660749Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=709165Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14145
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=627552Exploit
• http://openwall.com/lists/oss-security/2011/05/31/14Exploit
• http://openwall.com/lists/oss-security/2011/05/31/18Exploit
• http://openwall.com/lists/oss-security/2011/05/31/4Exploit
• http://openwall.com/lists/oss-security/2011/05/31/9Exploit
• http://www.securityfocus.com/bid/48064
• https://bugzilla.mozilla.org/show_bug.cgi?id=660749Exploit
• https://bugzilla.redhat.com/show_bug.cgi?id=709165Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14145

Published

Jun 6, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-0076Unspecified vulnerability in the Java Embedding Plugin (JEP)…
• CVE-2011-0077Unspecified vulnerability in the browser engine in Mozilla F…
• CVE-2011-0078Unspecified vulnerability in the browser engine in Mozilla F…
• CVE-2011-0079Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2011-0080Multiple unspecified vulnerabilities in the browser engine i…
• CVE-2011-0081Unspecified vulnerability in the browser engine in Mozilla F…
• CVE-2011-0083Use-after-free vulnerability in the nsSVGPathSegList::Replac…
• CVE-2011-0084The SVGTextElement.getCharNumAtPosition function in Mozilla …
• CVE-2011-0085Use-after-free vulnerability in the nsXULCommandDispatcher f…
• CVE-2011-0086win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2011-0087win32k.sys in the kernel-mode drivers in Microsoft Windows X…
• CVE-2011-0088win32k.sys in the kernel-mode drivers in Microsoft Windows X…