Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Web Application Security
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Cross Site Cooking Jan 29 2006 12:50AM
Michal Zalewski (lcamtuf dione ids pl)

(Why, yes, I came up with the name, and had to find some bugs to be able
to post this.)

Summary
-------

There are three fairly interesting flaws in how HTTP cookies were
designed and later implemented in various browsers; these shortcomings
make it possible (and alarmingly easy) for malicio...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus