CVE-2013-6673

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a valid certificate that is unacceptable to the user.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-310

Affected software

No affected versions have been published.

Timeline

Published
Dec 11, 2013
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-66744.3Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey befCVE-2013-66815.9Tube Map Live Underground for Android before 3.0.22 has an Information Disclosure VulnerabilityCVE-2013-66826.4The phone-proxy implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0.3.6 and earlier does not properly validate X.509 certCVE-2013-66836.1The IPv6 implementation in Cisco NX-OS does not properly handle neighbor-table adjacencies, which allows remote attackers to cause a denial CVE-2013-66846.8The web framework on Cisco Wireless LAN Controller (WLC) devices does not properly validate configuration parameters, which allows remote auCVE-2013-66856.6The firmware on Cisco Unified IP phones 8961, 9951, and 9971 uses weak permissions for memory block devices, which allows local users to gaiCVE-2013-66866.8The SSL VPN implementation in Cisco IOS 15.3(1)T2 and earlier allows remote authenticated users to cause a denial of service (interface queuCVE-2013-66874.0The web portal in the Enterprise License Manager component in Cisco WebEx Meetings Server allows remote authenticated users to discover the CVE-2013-66886.3Directory traversal vulnerability in the license-upload interface in the Enterprise License Manager (ELM) component in Cisco Unified CommuniCVE-2013-66896.9Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier allows local users to bypass file permissions, and read, modify, or creCVE-2013-66904.3Multiple cross-site scripting (XSS) vulnerabilities in the web interface in the Assurance component in Cisco Prime Collaboration allow remotCVE-2013-66916.8The WebVPN CIFS implementation in Cisco Adaptive Security Appliance (ASA) Software 9.0(.4.1) and earlier allows remote CIFS servers to cause