NVD

Id
345  
Name
CVE-2008-0367  
Description
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2008-01-18  
Modified Date
2008-10-23  
Seq
2008-0367  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
2275 345 CVE-2008-0367 http://aviv.raffon.net/2008/01/02/YetAnotherDialogSpoofingFirefoxBasicAuthentication.aspx  View
2276 345 CVE-2008-0367 http://aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx  View
2277 345 CVE-2008-0367 http://blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing/  View
2278 345 CVE-2008-0367 20080103 Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication  View
2279 345 CVE-2008-0367 20080103 Re: [Full-disclosure] Yet another Dialog Spoofing Vulnerability - Firefox Basic Authentication  View
2280 345 CVE-2008-0367 27111  View
2281 345 CVE-2008-0367 https://bugzilla.mozilla.org/show_bug.cgi?id=244273  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63271 JVNDB-2004-000634 Mozilla Firefox におけるフィッシング攻撃などを実行される脆弱性 Mozilla Firefox は、HTTP ベーシック認証のプロンプト表示の際、Realm テキストの後にサイトの認証リクエストを表示するため、フィッシングおよびなりすまし攻撃を実行される脆弱性が存在します。 CVE-2008-0367 30480 CVE-2008-0367 345 5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000634.html 2004-05-21 2012-09-25 View