This is https://bugzilla.mozilla.org/show_bug.cgi?id=281851
3APA3A wrote:
> I have reported this issue some time ago:
> http://www.security.nnov.ru/Fnews19.html
> but it looks like it was ignored, and not fixed in latest mozilla and
> firefox releases, so I decided to send "formal" advisory

Likes:
![Re: [Full-disclosure] Mozilla / Mozilla Firefox authentication weakness](https://www.webhostingtalk.nl/images/WHT_rd/misc/dT.png)
Quote