[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 27 Oct 2003 17:43:27 +0100
From: Andreas Reich <cyraxx@...ntion.de>
To: bugtraq@...urityfocus.com
Subject: Re: a dangerous fast spreading (yet simple) trojan horse.
Gadi Evron wrote:
> The jpeg is actually an HTML file, and when the web browser receives it,
> it thinks that it is a server error message for the file not existing,
> and loads the page.
Not necessarily. Often it is just a directory named xyz.jpg. The browser
then
gets redirected to /url/xyz.jpg/ and loads the index.html there.
-Andreas
Powered by blists - more mailing lists