Vulnerability Development mailing list archives

Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA)

From: Random Chaos <randomchaos () geocities com>
Date: Thu, 14 Feb 2002 09:06:49 -0600

Likewise for Netscape 6.2.1 for linux.

Opera 6.0 Technology Preview 2 & 3 for linux do not have any such dialog and
attempt to connect to whatever port is specified.

Random Chaos

Patrick Kuiper wrote:

> Netscape® Communicator 4.78 is giving the same error
>
>
>>>Exploit Example.
>>>available at http://eyeonsecurity.net/advisories/showMyCookie.html
>>>
>>FYI: Mozilla 0.9.8+ gives an alert:
>>"Access to the port number given has been disabled for security reasons."
>>
>
> Cu Patrick
>
>

Current thread:

Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) obscure (Feb 06)
- Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Mark Renouf (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Patrick Kuiper (Feb 07)
    - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Peter Bieringer (Feb 07)
    - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Random Chaos (Feb 14)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Olivier Faurax (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) Chip McClure (Feb 07)
  - Re: Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) jon schatz (Feb 07)
- <Possible follow-ups>
- Web Browsers vulnerable to the Extended HTML Form Attack (IE and OPERA) obscure (Feb 11)