Full Disclosure mailing list archives
Re: nVidia.com [Url Redirection flaw]
From: Rubén Camarero <rjcamarero () gmail com>
Date: Thu, 26 Mar 2009 01:09:38 -0400
_You_ are two dim to imagine that this issue is more like a bug than a vulnerability. If _you_ did try to imagine it, your head would probably explode and xssme would ooze out. On Thu, Mar 26, 2009 at 12:42 AM, Nick FitzGerald <nick () virus-l demon co uk>wrote:
Rubén Camarero wrote:What great references. Owasp isn't the king of vulnerability information,ofcourse a website named XSSed is going to count this as super serious, and while I respect Insecure.. these days, people have exploited web bugs to their max (and I'm waiting for more), but they aren't directly serious. DIRECTLY is the key word.No, but just because this kind of vulnerability is "only" indirectly serious dosen't mean that they aren't serious. Just because _you_ are too dim to imagine a way that someone can profit significantly from exploiting this does not mean that there are not such methods, NOR that use of such exploits won't "damage" nVidia. Whether nVidia (and others affected by so many similar vulnerabilities) will see this and decide to take action is what really matters. In this regard, I certainly hope that you do not work for, or consult with, or otherwise represent the view of nVidia on this issue. Regards, Nick FitzGerald _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-- Rubén Camarero CCNA, CISSP
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- nVidia.com [Url Redirection flaw], (continued)
- nVidia.com [Url Redirection flaw] Lorenzo Vogelsang (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Valdis . Kletnieks (Mar 25)
- nVidia.com [Url Redirection flaw] Lorenzo Vogelsang (Mar 25)
- Re: nVidia.com [Url Redirection flaw] mac . user (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)
- Re: nVidia.com [Url Redirection flaw] yersinia (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Chris Evans (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Pete Licoln (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Nick FitzGerald (Mar 26)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Nick FitzGerald (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 25)
- Re: nVidia.com [Url Redirection flaw] ascii (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Eitan Adler (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Jan G.B. (Mar 25)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)
- Re: nVidia.com [Url Redirection flaw] Rubén Camarero (Mar 24)