*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Jamie Strandboge
(jdstrand):
Binary package hint: firefox-3.0
this behaviour changed in yesterday's bundle of patches on ubunto 8.04
and firefox 3.0.1.
after the reboot, i started firefox and selected 'restore previous
session'. it opened both my gmail and my msn mail, and a protected page
on a third website, without challenging me for a password, even though i
never have firefox save my passwords.
previously to this update, after a system restart, i always got a
password challenge when i selected 'restore previous session' from
firefox, and it is the expected behaviour.
ProblemType: Bug
Architecture: i386
Date: Tue Aug 26 13:36:34 2008
DistroRelease: Ubuntu 8.04
Package: firefox-3.0 3.0.1+build1+nobinonly-0ubuntu0.8.04.3
PackageArchitecture: i386
ProcEnviron:
PATH=/home/username/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/games
LANG=en_US.UTF-8
SHELL=/bin/bash
SourcePackage: firefox-3.0
Uname: Linux 2.6.24-19-generic i686
** Affects: firefox-3.0 (Ubuntu)
Importance: Undecided
Status: New
** Tags: apport-bug
--
firefox 3.0.1 can access my email after reboot without challenge, even though i
asked it not to save passwords
https://bugs.launchpad.net/bugs/261553
You received this bug notification because you are a member of Ubuntu Bugs,
which is a direct subscriber.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
