You solution link returns a 404. F5's web site is horribly designed, and I can't find any references to this issue there. Do you have any additional information? Jerry Heidtke, CISSP Lead Information Security Analyst MGIC Information Security 414-347-6837 Jon Passki <cykyc@private> Sent by: plugins-writers-bounces@private 10/07/2005 08:46 PM Please respond to cykyc@private To plugins-writers@private cc Subject [Plugins-writers] First NASL script, be gentle (F5 cookie decoder) Hello All, Please give the script located at [1] a spin. Here's the description: desc["english"] = " The F5 BigIP load balancer encodes within a cookie the IP address of the actual web server it is acting on behalf of. This value may disclosure sensitive information, such as internal IP addresses. BIG-IP(R) is a registered trademark of F5 Networks, Inc. Solution: http://www.f5.com/solutions/archives/techbriefs/cookie.html Risk factor : Low"; There's a bunch of sites that set this, from my cookie viewing, so enjoy! Jon [1] http://www.visi.com/~jpasski/bigip_cookie.nasl MD5 http://www.visi.com/~jpasski/bigip_cookie.nasl.md5 MD5 referral http://www.visi.com/~jpasski/e72562e00de0b699f611089fe7d35916 __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers _______________________________________________ Plugins-writers mailing list Plugins-writers@private http://mail.nessus.org/mailman/listinfo/plugins-writers
This archive was generated by hypermail 2.1.3 : Tue Oct 11 2005 - 06:02:48 PDT