kanotix.com

Software - Password-Phishing hole in Iceweasel, Firefox, Mozilla

hubi - 22.11.2006, 20:38 Uhr
Titel: Password-Phishing hole in Iceweasel, Firefox, Mozilla
Huge password-phishing hole in the mozilla family. The demo works "great" here with iceweasel and mozilla:
http://www.heise-security.co.uk/service ... word=test#

First exploits are reported from myspace.com

More here:
http://www.heise-security.co.uk/news/81419

hubi
craigevil - 22.11.2006, 23:48 Uhr
Titel: RE: Password-Phishing hole in Iceweasel, Firefox, Mozilla
wow. Good thing I login manually on most site., I think here and lq.org are the only two sites I autologin, but then again I never clear the cookies from here or lq.org .

Never even been to myspace.
freshmeadow - 23.11.2006, 00:10 Uhr
Titel: Thank you for the warning
Thank you so much Hubi for this heads-up! I tried the demo with a fake user name and password and it picked it up right away. I have truned off remembering passwords in Mozilla.
jackiebrown - 23.11.2006, 00:10 Uhr
Titel: RE: Password-Phishing hole in Iceweasel, Firefox, Mozilla
I only use konqueror unless I have a desire to watch a quicktime preview.

Other than that I am fine. And I fine I lost my interest in the traliers.
analogtek - 23.11.2006, 03:47 Uhr
Titel: RE: Password-Phishing hole in Iceweasel, Firefox, Mozilla
The demo link is a good test for proving if you got your option's right. I must have correct cause I don't get a password back from the test. I hope the All see this test link in post.
Alle Zeiten sind GMT + 1 Stunde
PNphpBB2 © 2003-2007