Description
Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
References
- 24352 vdb-entry
- 43467 vdb-entry
- multiple-basic-authentication-spoofing(34983) vdb-entry
- http://testing.bitsploit.de/test.html
- http://www.0x000000.com/?i=334