Firefox update fixes international character password glitch
Lost in transliteration
Posted in ID, 29th September 2008 12:15 GMT
Webcast: Building Applications for the 21st Century
Mozilla has published an update to its popular Firefox web browser designed to fix a password saving glitch.
Firefox version 3.0.3, released on Friday (26 September), addresses a bug in the Password Manager feature of the previous version of the browser that meant users might be unable to retrieve saved passwords or register new passwords. The bug in recording login credentials stemmed from an error in handling login records (for websites, user names, or passwords) which had international characters in them.
More precisely the flaw arises from problems in saving non-ASCII data as something other than UTF-8, the popular character encoding schema.
Mozilla acknowledged the problem last week, and promised a quick fix for the bug. Normally browser updates from Mozilla come in pairs, but it seems versions 2.x of Firefox are unaffected by the bug. ®

The Register Guide to Extended Validation
LDAP Injection [3-2APZ1KL]
Blind SQL Injection [3-2APYM5E]
Preventing Google Hacking [3-2APYMGU]
Building Web Application Security into Your Development Process [3-2APYMBV]

Inmate hacked prison network, broke into employee database
Miscreants hijacking machines via (freshly patched) Adobe flaw
Martial law planned for Craigslist's red-light district
Cocaine addicted IT manager hacks ex-employer's mail servers