CVE-2008-0367
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic...
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
Exploit likelihood
What each source reports
NVD Score used
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
- Record
CVE-2008-0367- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
- Record
CVE-2008-0367- Updated
- 2026-11-02
EUVDEUVD-2008-0377 No score
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
- Record
EUVD-2008-0377- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5fjw-r22m-94v3 No score
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic...
Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting the authentication after the Realm text, which might make it easier for remote HTTP servers to conduct phishing and spoofing attacks.
- Record
GHSA-5fjw-r22m-94v3- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0367 is a medium vulnerability (CVSS 5.0) in Mozilla Firefox, published January 18, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.
References
blog.mozilla.com/security/2008/01/04/basicauth-dialog-realm-value-spoofing
bugzilla.mozilla.org/show_bug.cgi?id=244273
aviv.raffon.net/2008/01/05/FirefoxDialogSpoofingFAQ.aspx
securityfocus.com/archive/1/485738/100/200/threaded
nvd.nist.gov/vuln/detail/CVE-2008-0367
github.com/advisories/GHSA-5fjw-r22m-94v3