Security Incidents mailing list archives

Re: foreign HTTP requests


From: nicolas.gregoire () 7THZONE COM (Nicolas GREGOIRE)
Date: Fri, 16 Jun 2000 10:53:59 +0200


First, please excuse my poor english !

=?iso-8859-2?Q?Daniel_Do=E8ekal?= a Ć©crit :
It is a BUG of _browsers_ in my opinion who are sending request to wrong IP
adresses - my guess is that it happens at moment of chaning from one server
to another.

I have put dsniff on my webserver, and I see exactly the same thing that
you.
Several browsers have this comportement, and send me cookies &
authentification (Basic or Proxy)

Cookie: jrunsessionid=96100716990480607; path=/

Cookie: WEBTRENDS_ID=167.206.58.40-3717060432.29349083; expires=Fri,
31-Dec-2010 00:00:00 GMT; path=/

Cookie: session-id-time=961574400; path=/; domain=.amazon.com;

They send you cookies too .....
Maybe a problem for privacy, no ?

Any idea on how this can happen ?


Current thread: