CVE Kennung:	CVE-2009-0358
Beschreibung:	Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache Cache-Control directives, which allows local users to obtain sensitive information by using the (a) back button or (b) history list of the victim's browser, as demonstrated by reading the response page of an https POST request.
Test Kennungen:	1.3.6.1.4.1.25623.1.0.63379   1.3.6.1.4.1.25623.1.0.63378
Querverweise:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0358 BugTraq ID: 33598 http://www.securityfocus.com/bid/33598 https://www.redhat.com/archives/fedora-package-announce/2009-February/msg00240.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:044 http://blogs.imeta.co.uk/JDeabill/archive/2008/07/14/303.aspx https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10610 RedHat Security Advisories: RHSA-2009:0256 http://rhn.redhat.com/errata/RHSA-2009-0256.html http://www.securitytracker.com/id?1021667 http://secunia.com/advisories/33799 http://secunia.com/advisories/33809 http://secunia.com/advisories/33831 http://secunia.com/advisories/33841 http://secunia.com/advisories/33846 http://secunia.com/advisories/33869 SuSE Security Announcement: SUSE-SA:2009:009 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-02/msg00001.html http://www.ubuntu.com/usn/usn-717-1 http://www.vupen.com/english/advisories/2009/0313