[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    Re: [Full-Disclosure] Re: Mozilla Firefox Certificate Spoofing
From:       Peter Besenbruch <prb () lava ! net>
Date:       2004-07-31 17:59:44
Message-ID: 410BDE10.6010008 () lava ! net
[Download RAW message or body]

Stephen Samuel wrote:

 > Has this been posted to bugilla????
 >
 >
 > E.Kellinis wrote:
 >
 >> #########################################
 >> Application:    Mozilla Firefox
 >> Vendors:        http://www.mozilla.com
 >> Version:         0.9.1 / 0.9.2
 >> Platforms:       Windows
 >> Bug:               Certificate Spoofing (Phishing)
 >> Risk:              High
 >> Exploitation:   Remote with browser
 >> Date:             25 July 2004
 >> Author:          Emmanouel Kellinis
 >> e-mail:           me@cipher(dot)org(dot)uk
 >> web:              http://www.cipher.org.uk
 >> List :              BugTraq(SecurityFocus)/ Full-Disclosure
 >> #########################################


This was fixed by the July 27 builds in both Firefox 0.9.2( or 1) and 
Mozilla 1.7. The Mozilla 1.4 branch was also updated.

Bugzilla report:
http://bugzilla.mozilla.org/show_bug.cgi?id=253121

________________________________________________________________

Hawaiian Astronomical Society: http://www.hawastsoc.org
HAS Deepsky Atlas: http://www.hawastsoc.org/deepsky

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
[prev in list] [next in list] [prev in thread] [next in thread]