Firefox 2.0 Password Manager Bug Exposes Passwords

Discussion in 'other security issues & news' started by ronjor, Nov 21, 2006.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,838
    Location:
    Texas
    Story
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    This is quite a serious bug, not? And is it that hard to avoid these kind of programming errors? :blink:
     
  3. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    I think you can set firefox to not remember any passwords and other personal details etc etc....
     
  4. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    But does it affect my passwords if I have installed Firefox in my computer, but I use Internet Explorer for sites with password?
     
  5. Robyn

    Robyn Registered Member

    Joined:
    Feb 1, 2004
    Posts:
    1,189
  6. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    But if I use Internet Explorer 6, then my passwords are secure? So I should not download Internet Explorer 7?

    I downloaded Mozilla Firefox 2.0 but I never used it because I saw this topic. But during installation process it asked if I would transfer information to Mozilla Firefox 2.0 from Internet Explorer. I did and now I have a fear that one password that was saved to remember in Internet Explorer is now known to some other person.
     
  7. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,221
    Hello,
    No need to worry.
    Your passwords may be stolen if:
    1. You save them in your browser - if you always click 'never' or 'not now' when prompted to save the password, there's nothing to steal.
    2. You need to visit a specially crafted page and be duped into interaction with content thereon to get potentially exploited.
    Mrk
     
  8. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you very much. That is really relieving to hear. Although I clicked once yes when prompted to save the password.
     
  9. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,221
    Hello,
    You can delete saved passwords.
    Mrk
     
  10. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Could you explain me how to do it, please? I think I was able to do it by saving a false password instead the right, but I am not sure did it work correctly.
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,838
    Location:
    Texas
    In Firefox, go to the top menu, tools, options, security, show passwords. You can remove them from the window.
     
  12. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    10,221
    Hello,
    Well, ronjor was faster....
    Mrk
     
  13. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you very much. I know this is not this topic but could you tell me please, how to do it in Internet Explorer too?
     
  14. Mem

    Mem Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    292
    For IE7 Tools->Internet Options-> General-> Browsing History Delete-> Delete All or Delete Passwords
     
  15. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,838
    Location:
    Texas
    For IE6, tools, Internet options, content, click auto complete, click clear passwords.
     
  16. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you all very much for your help.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.