Flaw in how Firefox handles log-ons leaves passwords vulnerable to ID thieves

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Flaw in how Firefox handles log-ons leaves passwords vulnerable to ID thieves

01-05-2008, 10:34 AM,

Post: #1

mandy Offline

Administrator

Posts: 9,932
Likes Given: 0
Likes Received: 6 in 5 posts
Joined: Feb 2011
Reputation: 0

Flaw in how Firefox handles log-ons leaves passwords vulnerable to ID thieves

Quote:A serious flaw in how Firefox handles log-ons could be used by identity thieves to dupe users into disclosing passwords, a noted security researcher said Wednesday...

According to Raff, Firefox 2.0.0.11 -- Mozilla Corp.'s most current version -- fails to sanitize single quotation marks and spaces in what's called the "Realm" value of an authentication header. "This makes it possible for an attacker to create a specially crafted Realm value which will look as if the authentication dialog came from a trusted site," said Raff...

full article: http://www.pcworld.com/article/id,140997...ticle.html

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	Firefox 3 handling of SSL certificates is bad for the Web	mandy	0	2,573	08-04-2008, 01:28 PM Last Post: mandy
	Mozilla Releases Firefox 3	mandy	21	11,061	06-13-2008, 12:09 PM Last Post: mandy
	Study: Firefox and Opera Users Have Higher IQs Than Internet Explorer Users	mandy	0	2,394	05-27-2008, 12:08 PM Last Post: mandy
	Firefox: Faster Than a Speeding Bullet?	BellisimaJ.	0	2,274	04-26-2008, 02:12 PM Last Post: BellisimaJ.
	Mozilla announces Firefox for Mobiles	Kristijntje	0	2,947	10-10-2007, 03:20 PM Last Post: Kristijntje
	Why Firefox is Blocked	BellisimaJ.	14	7,143	09-16-2007, 08:35 PM Last Post: bargainbloodhound
	Password vulnerability in Firefox 2.0.0.5	mandy	0	2,498	07-24-2007, 09:24 AM Last Post: mandy
	Firefox: 20 tweaks for speeding up page loads, reducing memory drain	mandy	1	3,199	05-31-2007, 08:02 AM Last Post: accentnepal
	Ten Firefox Extensions to Avoid: FasterFox, GreaseMonkey, NoScript, and more	Kristijntje	1	4,789	05-28-2007, 01:07 PM Last Post: BellisimaJ.
	Flock Killer: Mozilla to add Social Networking Tools to Firefox	mandy	0	2,323	04-04-2007, 07:22 AM Last Post: mandy

Forum Jump:

Users browsing this thread: 1 Guest(s)