Bugtraq mailing list archives

RE: Who Need Friends ? IE & MSN expose contact list & other info

From: "Thor Larholm" <thor () pivx com>
Date: Wed, 16 Oct 2002 09:00:34 +0200

This is not a vulnerability or even privacy exposure in MSN, but just a
demonstration of zone spoofing by using the %2F encoding bug.

All the exposed MSN contact list and information is intentionally, and
safely, exposed in the My Computer zone.


Regards
Thor Larholm, Security Researcher
PivX Solutions, LLC

Are You Secure?
http://www.PivX.com

-----Original Message-----
From: drorshalev () hotmail com [mailto:drorshalev () hotmail com]
Sent: 15. oktober 2002 15:05
To: bugtraq () securityfocus com
Subject: Who Need Friends ? IE & MSN expose contact list & other info

Current thread:

Who Need Friends ? IE & MSN expose contact list & other info drorshalev (Oct 15)
- <Possible follow-ups>
- RE: Who Need Friends ? IE & MSN expose contact list & other info Thor Larholm (Oct 16)