CVE-2008-1238

Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.

🔗 References (70)

• secalert@redhathttp://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html
• secalert@redhathttp://rhn.redhat.com/errata/RHSA-2008-0208.html
• secalert@redhathttp://secunia.com/advisories/29391
• secalert@redhathttp://secunia.com/advisories/29526
• secalert@redhathttp://secunia.com/advisories/29539
• secalert@redhathttp://secunia.com/advisories/29541
• secalert@redhathttp://secunia.com/advisories/29547
• secalert@redhathttp://secunia.com/advisories/29550
• secalert@redhathttp://secunia.com/advisories/29558
• secalert@redhathttp://secunia.com/advisories/29560
• secalert@redhathttp://secunia.com/advisories/29607
• secalert@redhathttp://secunia.com/advisories/29616
• secalert@redhathttp://secunia.com/advisories/29645
• secalert@redhathttp://secunia.com/advisories/30327
• secalert@redhathttp://secunia.com/advisories/30620