Session Fixation

firefox is vulnerable to session fixation. The vulnerability exists as firefox does not properly interpret Set-Cookie headers within response that have a 407 status code...