RE: Who Need Friends ? IE & MSN expose contact list & other info

From: Thor Larholm (thorat_private)
Date: Wed Oct 16 2002 - 00:00:34 PDT

Next message: Zero-X ScriptKiddy: "phptonuke allows Remote File Retrieving"

Previous message: Murat Balaban: "Designing Shellcode Demystified"
Maybe in reply to: drorshalevat_private: "Who Need Friends ? IE & MSN expose contact list & other info"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is not a vulnerability or even privacy exposure in MSN, but just a
demonstration of zone spoofing by using the %2F encoding bug.

All the exposed MSN contact list and information is intentionally, and
safely, exposed in the My Computer zone.


Regards
Thor Larholm, Security Researcher
PivX Solutions, LLC

Are You Secure?
http://www.PivX.com

-----Original Message-----
From: drorshalevat_private [mailto:drorshalevat_private]
Sent: 15. oktober 2002 15:05
To: bugtraqat_private
Subject: Who Need Friends ? IE & MSN expose contact list & other info

Next message: Zero-X ScriptKiddy: "phptonuke allows Remote File Retrieving"
Previous message: Murat Balaban: "Designing Shellcode Demystified"
Maybe in reply to: drorshalevat_private: "Who Need Friends ? IE & MSN expose contact list & other info"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Wed Oct 16 2002 - 14:59:41 PDT