Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Mozilla Fixes Site Error-Handling Bug


23 Nov 2010   #1
JMH

Win 7 Ultimate 64-bit. SP1.
 
 
Mozilla Fixes Site Error-Handling Bug

Quote:

Mozilla has fixed a bug in the way that its Bugzilla Web site and others handled certain errors, which could have been exploited to execute a man-in-the-middle attack against an unsuspecting user.

The bug was related to the way that the sites responded to certain requests from client machines when the clients specify an incorrect HTTP host header. The Bugzilla site holds a wild card SSL certificate that also is valid on Mozilla.org, and as a result when the sites respond to the request with the incorrect header, clients can be redirected to a non-HTTPS site for an error message.

As a result, a network attacker can divert a client connection bound for any *.mozilla.org site to one of these servers and cause the client to receive an incorrect redirect. This is already a breach of the integrity that SSL is supposed to provide. But what is worse, since the redirect is to http://, the attacker can substitute arbitrary content and thereby perform XSS," Matt McCutchen wrote in an explanation of the certificate problem on Bugzilla.
Mozilla Fixes Site Error-Handling Bug | threatpost


My System SpecsSystem Spec
.

Reply

 Mozilla Fixes Site Error-Handling Bug




Thread Tools



Similar help and support threads for2: Mozilla Fixes Site Error-Handling Bug
Thread Forum
Certicicate error does not allow to enter web site anyway. Browsers & Mail
Good site returning 404 error Browsers & Mail
Random BSOD - Memory handling error? BSOD Help and Support
Why Firefox Portable invisible on Mozilla site? Browsers & Mail
Mozilla fixes Firefox crash bug Browsers & Mail
Mozilla releases Firefox 3.0.6, fixes critical issue News
Solved script error on site Browsers & Mail

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 03:31 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33