Firefox vulnerable to Password Manager flaw - Linux Links

News Sections

Home
General News (3972/0)
Reviews (626/0)
Press Releases (464/0)
Distributions (187/0)
Software (807/0)
Hardware (522/0)
Security (192/0)
Tutorials (337/0)
Off Topic (180/0)

User Functions

Don't have an account yet? Sign up as a New User

Events

There are no upcoming events

Firefox vulnerable to Password Manager flaw

Wednesday, November 22 2006 @ 02:05 PM EST
Contributed by: sde

Both the Mozilla Foundation's Firefox 2 and Microsoft's Internet Explorer 7 web browsers are vulnerable to a flaw that could allow attackers to steal passwords.

Dubbed a Reverse Cross Site Request vulnerability (RCSR) by its discoverer Robert Chapin, the flaw allows hackers to compromise users' passwords and usernames by presenting them with a fake login form. Firefox Password Manager will automatically enter any saved passwords and usernames into the form.
The data is then automatically sent to an attacker's computer without the user's knowledge, according to the Chapin Information Services (CIS) site.
Full article

[ Views: 1423 ]

Firefox vulnerable to Password Manager flaw | 0 comments | Create New Account

The following comments are owned by whoever posted them. This site is not responsible for what they say.

No user comments.

What's Related

Full article

More by sde

More from Security

Story Options

Mail Story to a Friend

Printable Story Format

We have written a range of guides highlighting excellent free books for popular programming languages. Check out the following guides: C, C++, C#, Java, JavaScript, CoffeeScript, HTML, Python, Ruby, Perl, Haskell, PHP, Lisp, R, Prolog, Scala, Scheme, and SQL.