CVE-2006-2786

Name	CVE-2006-2786
Description	HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy servers, allows remote attackers to cause Firefox to interpret certain responses as if they were responses from two different sites via (1) invalid HTTP response headers with spaces between the header name and the colon, which might not be ignored in some cases, or (2) HTTP 1.1 headers through an HTTP 1.0 proxy, which are ignored by the proxy but processed by the client.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-1118, DSA-1120, DSA-1134-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
firefox (PTS)	sid	132.0.2-1	fixed
thunderbird (PTS)	bullseye	1:115.12.0-1~deb11u1	fixed
	bullseye (security)	1:128.4.3esr-1~deb11u1	fixed
	bookworm	1:115.16.0esr-1~deb12u1	fixed
	bookworm (security)	1:128.4.3esr-1~deb12u1	fixed
	sid, trixie	1:128.4.3esr-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
firefox	source	(unstable)	1.5.dfsg+1.5.0.4-1	medium
mozilla	source	sarge	2:1.7.8-1sarge7.1		DSA-1118
mozilla	source	(unstable)	2:1.7.13-0.3	medium
mozilla-firefox	source	sarge	1.0.4-2sarge9		DSA-1120
mozilla-thunderbird	source	sarge	1.0.2-2.sarge1.0.8a		DSA-1134-1
thunderbird	source	(unstable)	1.5.0.4-1	medium
xulrunner	source	(unstable)	1.8.0.4-1	medium

MFSA-2006-33