Lukas Petrovicky

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions 2.0.0.11 and 3.0b2, and possibly earlier versions **Description** The issue allows remote HTTP servers to conduct phishing and spoofing attacks by displaying the site requesting authentication after the Realm text when prompting for HTTP Basic Authentication. **Recommendations** For Mozilla Firefox versions 2.0.0.11 and 3.0b2, and possibly earlier versions, consider updating to a newer version to mitigate the risk of phishing and spoofing attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.