| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | = 0.8= 0.9= 0.9.1= 0.9.2= 0.9.3 | |
| mozilla | = 1.7= 1.7.1= 1.7.2= 1.7.3 |
Firefox before 1.0 and Mozilla before 1.7.5, when configured to use a proxy, respond to 407 proxy auth requests from arbitrary servers, which allows remote attackers to steal NTLM or SPNEGO credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free