Slashdot | Serious Vulnerability In Firefox 2.0.0.12
“Mozilla Firefox 2.0.0.12, mere hours old, is vulnerable by default to a directory traversal trick, via the view-source mechanism. Although mitigated by the NoScript plug-in, this is quite a serious bug — the default installation is vulnerable from the get-go.”
Actually, this information is likely to be inaccurate. See:
http://shaver.off.net/diary/2008/02/10/view-sourceresource-vulnerability-does-not-expose-personal-information/
Thanks! You guys just saved me a couple of hours of work.
Thanks for this article.