Description
Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / (slash) characters in the URL.
References
- 34535 vdb-entry
- firefox-phishing-security-bypass(33486) vdb-entry
- 20070329 Re: Bypass phishing protection in Firefox / Opera mailing-list