full-disclosure - Re: Internet Explorer URL parsing vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: guninski at guninski.com (Georgi Guninski)
Subject: Re: Internet Explorer URL parsing
 vulnerability

On Fri, 12 Dec 2003 11:01:24 -0800 (PST)
S G Masood <sgmasood@...oo.com> wrote:

> 
> Hello,
> 
> I was expecting that someone would come up with an
> explanation as to why the 0x01 trick works. 0x00,
> 0x0A, 0x0D causing problems would be understandable
> but, 0x01 causing problems is somewhat strange. This
> is not the first time IE has a problem with the 0x01
> byte embedded in the URL:
> 
> [1]http://www.guninski.com/read.html
> [2]http://www.guninski.com/scrauto.html
> 
> Since he discovered these previous issues, maybe
> Guninski has an explanation.
> 

yes, m$ have had more serious problems with %01 in the past.

my explanation is that they just suffer from brain damage and greediness.

georgi