AutoComplete passwords bug in 6.0.2800.1106.xpsp2.030422-1633

From: Dmitry Sumin (dmitrys.no.spam_at_passware.net)
Date: 04/30/04


Date: Thu, 29 Apr 2004 20:51:03 -0700

Hello!

A colleague of mine found a bug in IE AutoComplete/password saving feature that cost him lost password.

Below are step-by-step instructions to reproduce the bug
(at least with my IE 6.0.2800.1106.xpsp2.030422-1633):

1. Go to any page with user name/password edit boxes and login button, i.e.:
http://www.flashswitch.com/ie-sample/test-form.htm

2. Login with these pairs of user name/passwords, each time
instructing IE to remember the password:
   qwer password: asdf
   1234 password: 12345
   admin password: 12345
   west password: south
   site password: password

3. Now login with user admin and password 12345678

4. Let IE save updated password for user admin

5. Saved passwords for users 'west' and 'site' are now deleted by IE.
Try selecting 'west' or 'site' from the list of saved users and check
the length of restored password.
 
I wonder if anyone can reproduce the problem, or it this an issue
with my installation of IE?

With Best regards,
Dmitry Sumin