CVE-2008-0367: Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authenticatio...

Security readout for executives and security teams

This issue is an old Firefox user-interface spoofing weakness. A malicious HTTP server could make the Basic Authentication prompt display text in a way that may mislead users about which site is asking for credentials. Business risk is mainly credential phishing, not system takeover. Exposure is most plausible where legacy Firefox 2.x or 3.0 beta-era browsers remain in use. Modern supported browsers are not shown as affected in the provided bundle. Internet-facing users could encounter a malicious HTTP server, but exploitation requires user interaction with the authentication dialog. Treat this as a legacy browser hygiene and phishing-risk issue. It is not presented as a remote code execution flaw, but any remaining affected browsers should be removed because they can help credential theft and likely carry many other unsupported-browser risks. Mitigation focus: Inventory endpoints for Firefox 2.0.0.11, Firefox 3.0b2, or earlier versions.; Retire affected legacy Firefox versions from managed endpoints.; Use supported browser versions maintained by the vendor..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.