BugTraq
MS to stop allowing passwords in URLs Jan 28 2004 10:54PM
McAllister, Andrew (McAllisterA umsystem edu) (10 replies)
Re: MS to stop allowing passwords in URLs Feb 03 2004 10:12PM
Nick FitzGerald (nick virus-l demon co uk)
Re: MS to stop allowing passwords in URLs Feb 03 2004 05:26PM
3APA3A (3APA3A SECURITY NNOV RU)
RE: MS to stop allowing passwords in URLs Feb 03 2004 03:54PM
Richard M. Smith (rms computerbytesman com)
RE: MS to stop allowing passwords in URLs Feb 03 2004 02:26PM
Andrew Harwood (aaharwood_maillist bigpond com)
Re: MS to stop allowing passwords in URLs Feb 03 2004 10:32AM
Ansgar -59cobalt- Wiechers (bugtraq planetcobalt net)
Re: MS to stop allowing passwords in URLs Feb 03 2004 05:31AM
Sam Schinke (sschinke myrealbox com)
Re: MS to stop allowing passwords in URLs Feb 03 2004 05:06AM
Dave McCormick (mccormic xecu net)
Re: MS to stop allowing passwords in URLs Feb 03 2004 04:01AM
Dave Warren (dave warren devilsplayground net) (3 replies)
Re: MS to stop allowing passwords in URLs Feb 06 2004 04:01AM
Nick FitzGerald (nick virus-l demon co uk)
Re: MS to stop allowing passwords in URLs Feb 04 2004 08:07AM
Gunnar Östlund (kalix dc luth se)
Re: MS to stop allowing passwords in URLs Feb 03 2004 06:09PM
David B Harris (dbharris eelf ddts net)
Re: MS to stop allowing passwords in URLs Feb 03 2004 03:57AM
N407ER (n407er myrealbox com)
RE: MS to stop allowing passwords in URLs Feb 03 2004 01:58AM
Fergus Brooks (fergusb evolve-online com) (1 replies)
RE: MS to stop allowing passwords in URLs Feb 03 2004 06:00PM
Joe Weisenberger (jjfw one net)


On Tue, 3 Feb 2004, Fergus Brooks wrote:

snipped ...
> Also I have found that often to get to an FTP server on the Internet
> (depending on the proxy, connection, firewall etc) that you need to use
> this format. Taking this functionality away will certainly make it
> harder for a lot of support people and consultants to do their jobs.
>
snipped ...

I just applied this patch (KB832894 MS-04-004) to IE 6.0 on W2K to check
handling of ftp url's. After the patch, ftp://username:password@site still
works. I think the change only applies to http, https.

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus