lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 5 Nov 2003 12:56:10 -0800
From: "Thor Larholm" <thor@...x.com>
To: "Liu Die Yu" <liudieyuinchina@...oo.com.cn>,
	<bugtraq@...urityfocus.com>
Subject: RE: double slash moves cache from INTERNET zone to MYCOMPUTER zone


I can only reproduce this from the My Computer zone, which already
allows arbitrary command execution through the codeBase vulnerability -
I don't see anything new in this, but feel free to correct me.



Regards
Thor Larholm
Senior Security Researcher
PivX Solutions, LLC

Get our research, join our mailinglist - http://pivx.com/larholm/

-----Original Message-----
From: Liu Die Yu [mailto:liudieyuinchina@...oo.com.cn] 
Sent: Wednesday, November 05, 2003 2:32 AM
To: bugtraq@...urityfocus.com
Subject: IE: double slash moves cache from INTERNET zone to MYCOMPUTER
zone


Snip
http://www.securityfocus.com/archive/1/343474/2003-11-02/2003-11-08/0


Powered by blists - more mailing lists