Cookies

[George <georger () NLS NET>]

A few friends of mine were discussing the possibility of a custom crafted
cookie replacing a valid cookie on a client machine being used to exploit
the web server that placed the first cookie on the client.

Has anyone looked at the possibility of editing a cookie to search
for/exploit buffer overflows in the server side code that reads cookies? If
there is any information on this sort of technique I would appreciate a
pointer.

Geo.