BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
XXE (Xml eXternal Entity) attack Oct 29 2002 11:23PM
Gregory Steuck (greg-xxe nest cx)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gregory Steuck security advisory #1, 2002

Overview:
XXE (Xml eXternal Entity) attack is an attack on an application that parses
XML input from untrusted sources using incorrectly configured XML parser.
The application may be coerced to open arbitrar...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus