Bugtraq: Re: Cleartext Password display in NS Communicator

[holger () TLNET DE (Holger Kanzog)]

On Wed, 2 Jul 1997, Fred Albrecht wrote:

> The following has been tested with Netscape Communicator 4.0 on NT 4 and
> 4.0b4 on Linux with the same results :
[..]

> The password is now plainly visible in the URL field :
>     « ftp://user:passwd () host »
Appendix to my previous message:

It happens only when connecting over proxy Squid (1.1.10) and it appears
also in Squid's access.log.

Holger

PGP-public-key: http://www.tlnet.de/holger.asc
PGP-fingerprint: 2A AE 66 7B 25 C6 0E 21  5A C5 42 E4 A0 53 59 DD