Weak SSL Password Protection in Mozilla Browsers
CVE-2004-0779
Currently unrated
What is CVE-2004-0779?
Certain Mozilla browsers, including versions 1.6 of Mozilla, 0.7 of Firebird, and 0.8 of Firefox, exhibit a vulnerability where cached passwords for SSL-encrypted sites are not correctly verified for secure transmission. This allows an attacker to exploit this flaw, potentially redirecting users to spoofed sites and intercepting sensitive information, including passwords sent in cleartext. This vulnerability poses a risk to users who rely on secure communications for protecting their sensitive data.