The host is installed with Mozilla firefox/seamonkey and is prone to information disclosure vulnerability.

Successful exploitation will let attackers to read a Firefox Sync key via standard filesystem operations and gain sensitive information. Impact Level: System/Application

Upgrade to Mozilla Firefox version 10.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html Upgrade to SeaMonkey version to 2.7 or later http://www.mozilla.org/projects/seamonkey/

The flaw is due to setting weak permissions for Firefox Recovery Key.html, which might allow local users to read a Firefox Sync key via standard filesystem operations.

SeaMonkey version prior to 2.7 Mozilla Firefox version 4.x through 9.0

• http://www.mozilla.org/security/announce/2012/mfsa2012-09.html

---

Updated on 2015-03-25