cnvd - cnvd-2021-54698

cnvd-2021-54698

Vulnerability from cnvd

Title: Mozilla Thunderbird权限许可和访问控制问题漏洞

Description:

Mozilla Thunderbird是一款开源的邮件客户端。

Mozilla Thunderbird存在权限许可和访问控制问题漏洞，该漏洞源于Mozilla维护服务安装在Windows操作系统的方式。目前没有详细漏洞细节提供。

Severity: 中

Patch Name: Mozilla Thunderbird权限许可和访问控制问题漏洞的补丁

Patch Description:

Mozilla Thunderbird是一款开源的邮件客户端。

Mozilla Thunderbird存在权限许可和访问控制问题漏洞，该漏洞源于Mozilla维护服务安装在Windows操作系统的方式。目前没有详细漏洞细节提供。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

厂商已发布了漏洞修复程序，请及时关注更新： https://www.mozilla.org/en-US/security/advisories/mfsa2021-19/

Reference: https://packetstormsecurity.com/files/162522/Mozilla-Windows-Maintenance-Service-Weak-DACL.html; http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29951

Impacted products

Name
['Mozilla Firefox <87', 'Mozilla Thunderbird <78.10.1', 'Mozilla Firefox ESR <78.10.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-29951",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-29951"
    }
  },
  "description": "Mozilla Thunderbird\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u90ae\u4ef6\u5ba2\u6237\u7aef\u3002\n\nMozilla Thunderbird\u5b58\u5728\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eMozilla\u7ef4\u62a4\u670d\u52a1\u5b89\u88c5\u5728Windows\u64cd\u4f5c\u7cfb\u7edf\u7684\u65b9\u5f0f\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2021-19/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-54698",
  "openTime": "2021-07-26",
  "patchDescription": "Mozilla Thunderbird\u662f\u4e00\u6b3e\u5f00\u6e90\u7684\u90ae\u4ef6\u5ba2\u6237\u7aef\u3002\r\n\r\nMozilla Thunderbird\u5b58\u5728\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8eMozilla\u7ef4\u62a4\u670d\u52a1\u5b89\u88c5\u5728Windows\u64cd\u4f5c\u7cfb\u7edf\u7684\u65b9\u5f0f\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Mozilla Thunderbird\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Mozilla Firefox \u003c87",
      "Mozilla Thunderbird \u003c78.10.1",
      "Mozilla Firefox ESR \u003c78.10.1"
    ]
  },
  "referenceLink": "https://packetstormsecurity.com/files/162522/Mozilla-Windows-Maintenance-Service-Weak-DACL.html; http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-29951",
  "serverity": "\u4e2d",
  "submitTime": "2021-06-17",
  "title": "Mozilla Thunderbird\u6743\u9650\u8bb8\u53ef\u548c\u8bbf\u95ee\u63a7\u5236\u95ee\u9898\u6f0f\u6d1e"
}

CVE-2021-29951 (GCVE-0-2021-29951)

Vulnerability from cvelistv5

Published

2021-06-24 13:18

Modified

2024-08-03 22:18

Severity ?

CWE

Mozilla Maintenance Service could have been started or stopped by domain users

Summary

The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating (if an attacker spammed the 'Stop' command); but also exposed attack surface in the maintenance service. *Note: This issue only affected Windows operating systems older than Win 10 build 1709. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.10.1, Firefox < 87, and Firefox ESR < 78.10.1.

References

▼	URL	Tags
	https://www.mozilla.org/security/advisories/mfsa2021-10/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2021-18/	x_refsource_MISC
	https://www.mozilla.org/security/advisories/mfsa2021-19/	x_refsource_MISC
	https://bugzilla.mozilla.org/show_bug.cgi?id=1690062	x_refsource_MISC

Impacted products

Vendor

Product

Version

▼

Mozilla

Thunderbird

Version: unspecified < 78.10.1

	Mozilla	Firefox	Version: unspecified < 87
	Mozilla	Firefox ESR	Version: unspecified < 78.10.1

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T22:18:03.337Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2021-10/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2021-18/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2021-19/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690062"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.10.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "87",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "78.10.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating (if an attacker spammed the \u0027Stop\u0027 command); but also exposed attack surface in the maintenance service. *Note: This issue only affected Windows operating systems older than Win 10 build 1709. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 78.10.1, Firefox \u003c 87, and Firefox ESR \u003c 78.10.1."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Mozilla Maintenance Service could have been started or stopped by domain users",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-06-24T13:18:39",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2021-10/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2021-18/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.mozilla.org/security/advisories/mfsa2021-19/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690062"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@mozilla.org",
          "ID": "CVE-2021-29951",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Thunderbird",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.10.1"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "87"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "Firefox ESR",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "78.10.1"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Mozilla"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Mozilla Maintenance Service granted SERVICE_START access to BUILTIN|Users which, in a domain network, grants normal remote users access to start or stop the service. This could be used to prevent the browser update service from operating (if an attacker spammed the \u0027Stop\u0027 command); but also exposed attack surface in the maintenance service. *Note: This issue only affected Windows operating systems older than Win 10 build 1709. Other operating systems are unaffected.*. This vulnerability affects Thunderbird \u003c 78.10.1, Firefox \u003c 87, and Firefox ESR \u003c 78.10.1."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "Mozilla Maintenance Service could have been started or stopped by domain users"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2021-10/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2021-10/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2021-18/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2021-18/"
            },
            {
              "name": "https://www.mozilla.org/security/advisories/mfsa2021-19/",
              "refsource": "MISC",
              "url": "https://www.mozilla.org/security/advisories/mfsa2021-19/"
            },
            {
              "name": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690062",
              "refsource": "MISC",
              "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1690062"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2021-29951",
    "datePublished": "2021-06-24T13:18:39",
    "dateReserved": "2021-04-01T00:00:00",
    "dateUpdated": "2024-08-03T22:18:03.337Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted