[23224] in bugtraq
Mac Netscape password fields
daemon@ATHENA.MIT.EDU (behr@math.niu.edu)
Wed Nov 21 21:21:03 2001
Message-Id: <200111211628.KAA04325@mail.math.niu.edu>
Date: Wed, 21 Nov 2001 10:27:59 -0600 (CST)
From: behr@math.niu.edu
To: bugtraq@securityfocus.com
MIME-Version: 1.0
Content-Type: TEXT/plain; charset=us-ascii
I apologize if this is well known, but the thread about IE password
inputs reminded me of a somewhat more serious problem in Netscape for
MacOS (v. 4.77, and at least some earlier ones):
access a page with <input type="password" ...>
type something in that field
print
The "secret" string prints in clear text.
--
Eric Behr | NIU Mathematical Sciences | (815) 753 6727
behr@math.niu.edu | http://www.math.niu.edu/~behr/ | fax: 753 1112
