Re: Bookmarks security vulnerabilities in both Internet Explorer

From: Jim Reavis (jreavisat_private)
Date: Tue May 11 1999 - 21:59:32 PDT

Next message: Thiago MM Zaninotti: "Re: [Solaris2.6,2.7 dtprintinfo exploits]"

Previous message: Patrick Oonk: "- J.J.F. / Hackers Team warns for SSHD 2.x brute force password"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

I did get this to work as described with IE 5.0 on Win 95.  It failed until
I re-read the directions and opened a local GIF with the "file:///" syntax
versus "c:\"

Using NT SP5, I got an access denied in a large dialog box that contained
Georgi's code.  He didn't mention NT in his original advisory, so I assume
it is just Win 9X issue?

Jim Reavis
SecurityPortal.com - the focal point for security on the Net
Jreavisat_private <mailto:Jreavisat_private>



		-----Original Message-----
		From:	Russ [mailto:Russ.Cooperat_private]
		Sent:	Monday, May 10, 1999 2:20 PM
		To:	BUGTRAQat_private
		Subject:	Re: Bookmarks security vulnerabilities in
both Internet Explorer 5.0 and Netscape Communicator 4.51 (Win95)

		I am unable to reproduce this on IE 5.0 with SP5. I get an
error message
		stating "Cannot find server or DNS error" after following
Georgi's
		instructions using TEST.TXT.

		Even pasting the entire script in the address box fails to
reproduce his
		described effects.

		Cheers,
		Russ - NTBugtraq moderator

Next message: Thiago MM Zaninotti: "Re: [Solaris2.6,2.7 dtprintinfo exploits]"
Previous message: Patrick Oonk: "- J.J.F. / Hackers Team warns for SSHD 2.x brute force password"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:45:48 PDT