Vulnerability Development mailing list archives

Privacy leak while surfing


From: Kai Kretschmann <K.Kretschmann () security-gui de>
Date: Thu, 25 Apr 2002 11:27:39 +0200

Hi,

A small privacy leak seams to occur while surfing with IE in a local LAN.

I noticed a lot of netbios name service broadcast from different windows workstations for name resolution requests of various webserver names. It seems that the IE tries to resolve normal internet domain names using local netbios ways in addition to the configured DNS. Now I can all see surfed domain names with the requesting client IP without spoofing anything, simply watch the broadcasts coming along.


--
Think-Safety
www.security-gui.de


Current thread: