backtop

Internet Firefox Update to 2.0.0.3 Fixes FTP Hole
Marcus Yam (Blog) - March 21, 2007 1:01 AM
Print E-mail del.icio.us 14 comment(s) - last by glennpratt.. on Mar 22 at 10:24 AM
Mozilla Firefox gets security update

Mozilla has issued another minor update to its Firefox 2.0 web browser. New for Firefox 2.0.0.3 is a single security fix that patches up a hole in the browser’s FTP PASV functionality. A malicious web page hosted on a specially-coded FTP server could use this feature to perform a rudimentary port-scan of machines inside the firewall of the victim.

Mozilla says that by itself this causes no harm, but information about an internal network may be useful to an attacker should there be other vulnerabilities present on the network. Also new in 2.0.0.3 are fixes to improve Web site compatibility.

The last time the Firefox was updated was less than a month ago when 2.0.0.2 was released to address issues with AutoComplete, how the "Save" dialog box displays for known file extensions, a bug where a mouse's scroll wheel would stop working, two memory leaks and a number of security-related concerns.

Firefox users can download 2.0.0.3 from Mozilla's homepage or use the auto update function within the browser.

Comments     Threshold


This article is over a month old, voting and posting comments is disabled
No relavence
By ajfink on 3/21/2007 10:42:30 AM , Rating: 2
No REAL point to this except that I find the picture for this story to be quite funny, :)

And...I much prefer 2.X over 1.5. A lot of people haven't switched simply for the changing in location of the close tab button from the end of the tab bar to each individual tab, but I think there is an extension to change it back...




RE: No relavence
By LatinMessiah on 3/21/2007 12:33:01 PM , Rating: 2
2.0 also doesn't keep a list of previously visited websites in the drop down menu located at the end of the URL window. That's reason enough for me to stick with 1.5.


RE: No relavence
By aos007 on 3/21/2007 12:43:45 PM , Rating: 1
AND someone in their infinite wisdom decided to disable the session manager extension. The built-in one in ver2 is much worse as it does not let you save an entire session and load it later and it lacks other functionality that we've gotten used to. What is worse, they are "discontinuing" support for ver1.5 and it's not even been a year. And people attack Microsoft for not supporting win2000... Makes me wonder who really is behind the Firefox development. I prefer to use Opera anyway, even though it's a bit less compatible.


RE: No relavence
By RyanVM on 3/21/2007 1:11:42 PM , Rating: 5
quote:
AND someone in their infinite wisdom decided to disable the session manager extension. The built-in one in ver2 is much worse as it does not let you save an entire session and load it later and it lacks other functionality that we've gotten used to.
Tab Mix Plus has extended session restore functionality beyond what's build into Fx2 by default. It works quite well and has the added bonus of including some really nice options for better tab usage.
quote:
What is worse, they are "discontinuing" support for ver1.5 and it's not even been a year. And people attack Microsoft for not supporting win2000... Makes me wonder who really is behind the Firefox development. I prefer to use Opera anyway, even though it's a bit less compatible.
OK, now you're doing nothing but trolling. Anyone (yourself included) has the complete ability to see exactly who's developing Firefox. They have a wiki, a public bug tracker, and are completely open source. What more do you want? Personal phone calls before they make any decision?

And lest we forget, Firefox being open source and all, if you or someone like you likes 1.5.x so much, feel free to grab the source and continue developing or backporting patches to it to your heart's content. There's absolutely nothing standing in your way. Can't say the same for Opera.


RE: No relavence
By smitty3268 on 3/21/2007 1:20:24 PM , Rating: 2
quote:
What is worse, they are "discontinuing" support for ver1.5 and it's not even been a year. And people attack Microsoft for not supporting win2000... Makes me wonder who really is behind the Firefox development.


The difference is that you have to pay for one and get the other for free. Mozilla doesn't have the money or developers to continue supporting old versions forever. Actually they may have the money, but definitely don't have the developers. The good news is that since Firefox is open source, if enough people want to continue support for older versions they can. And it's not like it will suddenly stop working, you just won't get any security updates without upgrading to a newer version.


RE: No relavence
By Le Québécois on 3/21/2007 5:06:32 PM , Rating: 2
quote:
What is worse, they are "discontinuing" support for ver1.5 and it's not even been a year.


Then why is it that every times I read on Dailytech that FireFox 2 has been updated, the same day I receive an auto-update message from my FireFox 1.5?


RE: No relavence
By RyanVM on 3/21/2007 1:06:19 PM , Rating: 2
I have the dropdown arrow at the end of my location bar with 2.0.0.3, right to the left of the Go button. What exactly am I missing?


RE: No relavence
By smitty3268 on 3/21/2007 1:15:55 PM , Rating: 2
I have a list of previously visited websites in a drop down menu located just to the left of the Go button. So unless you're describing the problem wrong I have to call BS here.


1.5.0.11 was also released
By skyyspam on 3/21/2007 5:43:46 AM , Rating: 1
http://www.mozilla.com/en-US/firefox/all-older.htm...

The link for those of us who know that "newest" isn't always synonymous with "best". :)

Those of us--that is, who don't have firefox set to automatically update, for whatever reason. :)




RE: 1.5.0.11 was also released
By Maharajamd on 3/21/2007 9:01:35 AM , Rating: 2
Support stops next month for 1.5... What is so great about 1.5 vs 2.0? Am I missing something?


RE: 1.5.0.11 was also released
By aos007 on 3/21/2007 12:47:11 PM , Rating: 2
Session management extensions are disabled in v2 because of their built-in support... which is much inferior. I switched on some of my machines and it was a nightmare to even figure out basic stuff in their horribly convoluted option screens. Yeah, latest isn't always the best.


RE: 1.5.0.11 was also released
By glennpratt on 3/22/2007 10:24:02 AM , Rating: 2
Tab Mix Plus


By ClockerXP on 3/21/2007 4:49:34 PM , Rating: 2
FIX THE DAMN PASSWORD STORAGE BUG ALREADY




"If you look at the last five years, if you look at what major innovations have occurred in computing technology, every single one of them came from AMD. Not a single innovation came from Intel." -- AMD CEO Hector Ruiz in 2007









botimage
Copyright 2009 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki