Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: [Full-disclosure] SEC-Consult SA 20051025-0 :: Snoopy Remote Code Execution Vulnerability Oct 27 2005 08:12AM
Florian Weimer (fw deneb enyo de)
* Bernhard Mueller:

> While the vulnerability can not be exploited using the Snoopy class
> file itself, there may exist implementations which hand unchecked
> URLs from users to snoopy.

Thanks for the notice.

Have you considered in your analysis that malicious servers might
return HTTP redirec...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus