Full Disclosure mailing list archives
Re: nVidia.com [Url Redirection flaw]
From: Valdis.Kletnieks () vt edu
Date: Wed, 25 Mar 2009 12:00:27 -0400
On Wed, 25 Mar 2009 15:21:42 BST, Lorenzo Vogelsang said:
Despite i've told to nvidia only the "url redirection" flaw i think that, if "url redirection" will be solved all the xss inherently vulnerabilites will be solved too.
Actual experience in the field has shown that in general, if you report a URL redirection issue to the maintainers of a website, a large percentage of the time they will *only* fix the problem with URL redirection, unless you make it clear to them *and they understand* that the URL redirection is only one symptom of a larger XSS issue. I'll give it a 50-50 chance that somebody will get to send NVidia an email saying "Good, you fixed the URL problem. Now about that XSS...."
Attachment:
_bin
Description:
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- nVidia.com [Url Redirection flaw] Lorenzo Vogelsang (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Martin Aberastegue (Mar 25)
- nVidia.com [Url Redirection flaw] Lorenzo Vogelsang (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Valdis . Kletnieks (Mar 25)
- nVidia.com [Url Redirection flaw] Lorenzo Vogelsang (Mar 25)
- <Possible follow-ups>
- Re: nVidia.com [Url Redirection flaw] mac . user (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)
- Re: nVidia.com [Url Redirection flaw] yersinia (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Chris Evans (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Pete Licoln (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Nick FitzGerald (Mar 26)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Nick FitzGerald (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Martin Aberastegue (Mar 25)