Mozilla Foundation's open source browser, Firefox, has warned users of a security flaw that gives away passwords and names of users, to other visitors on the browser. Internet explorer 7 also, reportedly has the same flaw, known as the Reverse Cross-Site Request (RCSR).
The flaw lets hackers access passwords and usernames by presenting them with a fake login form. In turn, Firefox Password Manager enters any saved passwords and usernames into that form. As a result, the data is automatically sent to an attacker's computer without the user's knowledge. This flaw has already been exploited on social-networking site MySpace, and it could affect anyone using a blog or forum that allows user-generated HTML code to be added.
Although Mozilla has not issued a fix, a bug report has been filed. Mozilla has suggested that users should avoid using Password Manager and the Master Password Timeout Firefox extension. Also, Security company Secunia has advised users to disable the 'Remember passwords for sites' option in Firefox.
Read more here.
Firefox Flaw Gives Away Names, Passwords
By: Priyanka Pradhan
| Nov 23, 2006
Tags: [ Mozilla Firefox ] [ Internet Explorer ] [ Hackers ] [ Reverse Cross-Site Request ] [ Secunia ] [ Firefox Password Manager ] [ Master Password Timeout Firefox extension ] [ MySpace.com ] [ Social networking site ]
 |
 |
| Ads by Google | ||
Am want email password craker 
@ Nov 26, 2006
How can 1 hack a password by using a browser ? raj @ Nov 26, 2006
LATEST NEWS
- QUAKE III Hits S60 Mobiles
- MSI To Launch 3 New Wind Models
- Microsoft Announces Reworked Windows
- Online Social Media Comes Alive During Mumbai Attacks
- Samsung Launches Handset For Pre-Teens
- Samsung and Hugo Boss Reveal New Handset
- Sonim XP3 Most Rugged Handset Yet
- Microsoft Launches X6 SideWinder Keyboard in India
- Genius Introduces 5 Megapixel Hi-def Camcorder
- Toshiba Launches 16GB microSDHC Card
| Ads by Google | ||
RELATED
Hot Searches & Keywords :
AMD
ATI
Acer
Adobe
Apple
Asus
Benq
Blackberry
Blizzard
Blu-Ray
Bluetooth
CES 2007
Canon
Capcom
Creative
DVD
Dell
E3 2007
E3 2008
EA
Electronic Arts
Facebook
Google
HP
Halo
IBM
ITunes
Intel
Internet
Ipod
LCD
LG
Linux
Logitech
Microsoft
Mobile
Mobile Phone
Mobile Phones
Motorola
Mp3
Myspace
Nintendo
Nokia
Nvidia
PC
PMP
PS2
PS3
PSP
Philips
Reliance Communications
Samsung
Sandisk
Search Engine
Skype
Smartphone
Sony
Sony Ericsson
Toshiba
Ubisoft
Valve
Vista
Voip
Website
Wii
Windows
Windows Mobile
Windows Vista
WoW
Xbox 360
Xbox Live
Xbox360
Yahoo!
Youtube
Zune
digicam
digital camera
iPhone
laptop
mp3 player
printer
social networking site
test
yahoo
| Ads by Google | ||
|
|
Sections
Products
Camcorders |
Controllers |
CPUs |
Desktop PCs |
Digital Cameras |
Digital Video Recorders |
DVD Players |
Games |
Gaming Consoles |
General |
GPS Systems |
Handhelds / PDAs |
Hard Drives |
Headphones & Headsets |
HiFi Audio Systems |
Home Theater Systems |
Input Devices |
Internet |
Laptops |
lenovo |
Low Level Components |
Mac Systems |
Mobile Phone Accessories |
Mobile Phones |
Monitors |
Motherboards |
MP3 / Audio Players |
Multi-Function Devices |
Networking |
Optical Drives |
PC Accessories |
PC Add-on Cards |
PC Cabinets |
PC Games |
Printers |
Projectors |
RAM Modules |
Scanners |
Software |
Speakers |
Telecom |
TVs |
Video Players |