BugTraq
RE: Internet Explorer and Opera local zone restriction bypass Oct 25 2003 10:02AM
Mindwarper * (mindwarper linuxmail org) (1 replies)
Re: Internet Explorer and Opera local zone restriction bypass Oct 27 2003 06:34PM
Heikki Toivonen (hjtoi comcast net)
Mindwarper * wrote:
> If Mozilla or Opera are installed it is also possible to use they're data which is stored in the /Application Data/.
> The only problem is that I will still have to know the username of the victim.

Mozilla user's profile path will have a randomly named directory. See
below (this on Windows 2000 and XP):

C:\Documents and Settings\<Windows username>\Application
Data\Mozilla\Profiles\<profile name, usually default>\<random 8
characters>.slt
Older Mozilla installations may have slightly different path, but they
should all still contain that "salted" directory name.

--
Heikki Toivonen

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus