Description
Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after 34 characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
References
- 43463 vdb-entry
- 24352 vdb-entry
- GLSA-200708-17 vendor-advisory
- multiple-basic-authentication-spoofing(34983) vdb-entry
- 26545 third-party-advisory
- SUSE-SR:2007:015 vendor-advisory
- http://testing.bitsploit.de/test.html
- http://www.0x000000.com/?i=334