575585 - The master password for saved passwords is not kept after the 3.6.6 Upgrade.

Status: RESOLVED WORKSFORME

(Firefox :: Security, defect)

Description

[Rsue Sorin]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6

- in earlier versions I checked the "Use a master password" check-box
- I added a string as master password
- today I updated to: "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.6) Gecko/20100625 Firefox/3.6.6" version and the settings I did for master password weren't there any more
- this could be major security issue, cause as I suppose you know all the passwords/info stored there can be seen in clear text   

Reproducible: Always

Steps to Reproduce:
1.install an older version on Mozilla 3.5 or something
2.set a Master Password
3.upgrade to 3.6.6
4. see if the settings are kept
Actual Results:  
- no master password present

Expected Results:  
- ALL the settings from that area should be kept
- OR a visible notice should be added

-

Comment 1

[Matthias Versen [:Matti]]

Firefox4.6 is old and we haven't heard about such issues with recent builds