Vulnerability Development mailing list archives

Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA)

From: Mark Renouf <mark () tweakt net>
Date: Thu, 07 Feb 2002 11:40:01 -0500

obscure wrote:


Exploit Example.

available at http://eyeonsecurity.net/advisories/showMyCookie.html

FYI: Mozilla 0.9.8+ gives an alert:
"Access to the port number given has been disabled for security reasons."

Current thread:

Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) obscure (Feb 06)
- Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Mark Renouf (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Patrick Kuiper (Feb 07)
    - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Peter Bieringer (Feb 07)
    - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Random Chaos (Feb 14)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Olivier Faurax (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Chip McClure (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) jon schatz (Feb 07)
- <Possible follow-ups>
- Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) obscure (Feb 11)