CNET News: Mozilla Bug Leaks Web Surfing Data

[ Thanks to Ron Johnson for this link. ]

"Netscape and other Web browsers based on the Mozilla development project contain a bug that leaks people's Web surfing data, according to a new report.

"The bug reveals the URL of the page someone is viewing to the Web server of the site last visited. This allows a Web server to track where people go after they leave the site, even if the next Web address comes from a bookmark or is manually typed into the browser.

"Researcher Sven Neuhaus, who published a security alert on Wednesday about the issue to the Bugtraq mailing list, said he had confirmed the bug in Mozilla 1.0, 1.0.1 and 1.1, though it probably also existed in older Mozilla versions. It also appears in browsers based on Mozilla's technology, including Netscape 7 and Galeon, a Linux application, he said..."

Complete Story

Related Stories:

• Red Hat Linux Advisory: Mozilla(May 15, 2002)
• MozillaNews.org: Mozilla.org Clarifies Security Policy (May 07, 2002)
• ZDNet UK: Netscape Flaw Exposes Hard Drives(May 01, 2002)
• Bugtraq: Mozilla Cookie Exploit(Jan 24, 2002)