Firefox 2.0 Password Manager Bug Exposes Passwords

Discussion in 'other security issues & news' started by ronjor, Nov 21, 2006.

Thread Status:
Not open for further replies.
  1. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,740
    Location:
    Texas
    Story
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    8,026
    Location:
    The Netherlands
    This is quite a serious bug, not? And is it that hard to avoid these kind of programming errors? :blink:
     
  3. nadirah

    nadirah Registered Member

    Joined:
    Oct 14, 2003
    Posts:
    3,647
    I think you can set firefox to not remember any passwords and other personal details etc etc....
     
  4. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    But does it affect my passwords if I have installed Firefox in my computer, but I use Internet Explorer for sites with password?
     
  5. Robyn

    Robyn Registered Member

    Joined:
    Feb 1, 2004
    Posts:
    1,189
  6. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    But if I use Internet Explorer 6, then my passwords are secure? So I should not download Internet Explorer 7?

    I downloaded Mozilla Firefox 2.0 but I never used it because I saw this topic. But during installation process it asked if I would transfer information to Mozilla Firefox 2.0 from Internet Explorer. I did and now I have a fear that one password that was saved to remember in Internet Explorer is now known to some other person.
     
  7. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    No need to worry.
    Your passwords may be stolen if:
    1. You save them in your browser - if you always click 'never' or 'not now' when prompted to save the password, there's nothing to steal.
    2. You need to visit a specially crafted page and be duped into interaction with content thereon to get potentially exploited.
    Mrk
     
  8. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you very much. That is really relieving to hear. Although I clicked once yes when prompted to save the password.
     
  9. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    You can delete saved passwords.
    Mrk
     
  10. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Could you explain me how to do it, please? I think I was able to do it by saving a false password instead the right, but I am not sure did it work correctly.
     
  11. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,740
    Location:
    Texas
    In Firefox, go to the top menu, tools, options, security, show passwords. You can remove them from the window.
     
  12. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,696
    Hello,
    Well, ronjor was faster....
    Mrk
     
  13. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you very much. I know this is not this topic but could you tell me please, how to do it in Internet Explorer too?
     
  14. Mem

    Mem Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    292
    For IE7 Tools->Internet Options-> General-> Browsing History Delete-> Delete All or Delete Passwords
     
  15. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,740
    Location:
    Texas
    For IE6, tools, Internet options, content, click auto complete, click clear passwords.
     
  16. AWorriedPerson

    AWorriedPerson Registered Member

    Joined:
    Dec 3, 2006
    Posts:
    30
    Thank you all very much for your help.
     
Loading...
Thread Status:
Not open for further replies.