WebApp Sec mailing list archives

Re: Redirection obfuscation in FF and NS


From: "Saqib Ali" <docbook.xml () gmail com>
Date: Mon, 20 Mar 2006 16:11:05 -0800

       http://www.visa.com@rsnake
       and
       http://rsnake:www.visa.com

Deja Vu....

hmm. this is pretty old stuff.

MS fixed it in 2005 in their browsers.
See
http://support.microsoft.com/default.aspx?scid=kb;[LN];834489

--
Saqib Ali, CISSP
http://www.xml-dev.com/blog/
"I fear, if I rebel against my Lord, the retribution of an Awful Day
(The Day of Resurrection)" Al-Quran 6:15

-------------------------------------------------------------------------
This List Sponsored by: SpiDynamics

ALERT: "How A Hacker Launches A Web Application Attack!"
Step-by-Step - SPI Dynamics White Paper
Learn how to defend against Web Application Attacks with real-world
examples of recent hacking methods such as: SQL Injection, Cross Site
Scripting and Parameter Manipulation

https://download.spidynamics.com/1/ad/web.asp?Campaign_ID=701300000003gRl
--------------------------------------------------------------------------


Current thread: