Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: Cleartext Password display in NS Communicator
From: holger () TLNET DE (Holger Kanzog)
Date: Wed, 2 Jul 1997 19:55:52 +0200


On Wed, 2 Jul 1997, Fred Albrecht wrote:

The following has been tested with Netscape Communicator 4.0 on NT 4 and
4.0b4 on Linux with the same results :

[..]

The password is now plainly visible in the URL field :
    « ftp://user:passwd () host »

Appendix to my previous message:

It happens only when connecting over proxy Squid (1.1.10) and it appears
also in Squid's access.log.

Holger

PGP-public-key: http://www.tlnet.de/holger.asc
PGP-fingerprint: 2A AE 66 7B 25 C6 0E 21  5A C5 42 E4 A0 53 59 DD



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]