full-disclosure - Re: Firefox 2.0.0.3 Phishing Protection Bypass Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1447910104.20070418135351@SECURITY.NNOV.RU>
Date: Wed, 18 Apr 2007 13:53:51 +0400
From: 3APA3A <3APA3A@...URITY.NNOV.RU>
To: "carl hardwick" <hardwick.carl@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Firefox 2.0.0.3 Phishing Protection Bypass
	Vulnerability

Dear carl hardwick,

 Do you know examples of phishing sites exploiting this vulnerability?

--Wednesday, April 18, 2007, 1:47:03 PM, you wrote to full-disclosure@...ts.grok.org.uk:

ch> This flaw
ch> http://kaneda.bohater.net/security/20070111-firefox_2.0.0.1_bypass_phishing_protection.php
ch> remains
ch> upatched since months!!!
ch> Firefox 2.0.0.1, 2.0.0.2, 2.0.0.3 are still vulnerable!!!!!
ch> https://bugzilla.mozilla.org/show_bug.cgi?id=367538

-- 
~/ZARAZA http://securityvulns.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/