CVE ID:	CVE-2005-0149
Description:	Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3 does not obey the network.cookie.disableCookieForMailNews preference, which could allow remote attackers to bypass the user's intended privacy and security policy by using cookies in e-mail messages.
Test IDs:	1.3.6.1.4.1.25623.1.0.51653
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-0149 BugTraq ID: 12407 http://www.securityfocus.com/bid/12407 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A100047 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11407 RedHat Security Advisories: RHSA-2005:094 http://www.redhat.com/support/errata/RHSA-2005-094.html RedHat Security Advisories: RHSA-2005:323 http://www.redhat.com/support/errata/RHSA-2005-323.html RedHat Security Advisories: RHSA-2005:335 http://www.redhat.com/support/errata/RHSA-2005-335.html http://secunia.com/advisories/19823 SuSE Security Announcement: SUSE-SA:2006:022 (Google Search) http://www.novell.com/linux/security/advisories/2006_04_25.html XForce ISS Database: mozilla-cookie-policy-bypass(19172) https://exchange.xforce.ibmcloud.com/vulnerabilities/19172