CVE

Id
30484  
CVE No.
CVE-2008-0367  
Status
Candidate  
Description
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.  
Phase
Assigned (20080118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
323545 30484 CVE-2008-0367 BUGTRAQ:20080103 Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication  View
323546 30484 CVE-2008-0367 URL:http://www.securityfocus.com/archive/1/archive/1/485738/100/200/threaded  View
323547 30484 CVE-2008-0367 BUGTRAQ:20080103 Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication  View
323548 30484 CVE-2008-0367 URL:http://www.securityfocus.com/archive/1/archive/1/485732/100/200/threaded  View
323549 30484 CVE-2008-0367 MISC:http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx  View
323550 30484 CVE-2008-0367 MISC:http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx  View
323551 30484 CVE-2008-0367 CONFIRM:http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/  View
323552 30484 CVE-2008-0367 CONFIRM:https://bugzilla.mozilla.org/show_bug.cgi?id=244273  View
323553 30484 CVE-2008-0367 BID:27111  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47317 JVNDB-2008-002627 aliTalk における SQL インジェクションの脆弱性 aliTalk には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-0371 30484 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002627.html  View