ie.50.redirection.txt

Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable for any damages caused by direct or indirect use of the information or functionality provided by this...

ie5.javascript.redirect.txt

IE 5.0 allows reading local and from any domain files and window spoofing using HTTP redirection to "javascript:" Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is n...

IE5_IFRAME_vuln.txt

IE 5.0 security vulnerability - reading local and from any domain, probably window spoofing is possible files using IFRAME and document.execCommand Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially...

Microsoft Internet Explorer 5.04.0.1 - iFrame

Microsoft Internet Explorer 5.04.0.1 - iFrame Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 IFRAME Vulnerability source: https://www.securityfocus.com/bid/696/info Internet Explorer 5 will allow a...

Microsoft Internet Explorer 5.0/4.0.1 - iFrame

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 4.0.1 for Windows 98/Windows NT 4.0/Unix 5.0 IFRAME Vulnerability source: https://www.securityfocus.com/bid/696/info Internet Explorer 5 will allow a malicious web page to read the contents of...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5 - Download Behaviour Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web...

Microsoft Internet Explorer 5 - Download Behaviour

Microsoft Internet Explorer 5.0 for Windows 95/Windows 98/Windows NT 4 Download Behavior Vulnerability source: https://www.securityfocus.com/bid/674/info The "download behavior" feature of Microsoft's Internet Explorer 5 may allow a malicious web site operator to read files on an IE5 client...

netscape4.5-read-dir.txt

---------------------------------------------------------------- Date: Mon, 23 Nov 1998 10:36:40 PST From: Georgi Guninski To: [email protected] Subject: Netscape Communicator 4.5 can read local files There is a bug in Netscape Communicator 4.5 for Windows 95 and 4.05 for WinNT 4.0 probably...

netscape.bookmarks.title.js.txt

Date: Sun, 16 May 1999 17:17:34 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator bookmarks security vulnerability There is a security bug in Netscape Communicator 4.51 Win95, 4.07 Linux guess all 4.x versions are affected in the way they handle special bookmarks...

msie.5.0.local.files.txt

Date: Tue, 30 Mar 1999 19:35:16 +0300 From: Georgi Guninski To: [email protected] Subject: IE 5.0 allows reading and sending local files to a remote server There is a security bug in Internet Explorer 5.0, which allows reading and sending local files to a remote server. The problem is a bug in...

browser.bookmarks.txt

Date: Sun, 9 May 1999 17:34:10 +0300 From: Georgi Guninski To: [email protected] Subject: Bookmarks security vulnerabilities in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 There is a design flaw in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 guess all 4....

msie.5.0.javascript.txt

Date: Fri, 19 Mar 1999 11:46:01 +0100 From: Most Psychoid To: [email protected] Subject: IE5 - same vulnerabilities, only some fixed Hello, The new Microsoft Internet Explorer 5 I checked Version: 5.00.0910.1309 still allows Frame Spoofing and reading of local Files as described by Georgi...

msie4-autoexec.bat-tdc.txt

Guninski's IE 4 reading AUTOEXEC.BAT. There is a bug in Internet Explorer 4.x patched which allows reading local files and sending them to an arbitrary server. The problem is: if you add '%01someURL' after the an about: URL, IE thinks that the document is loaded from the domain of 'someURL'. This...

netscape.4.x-javascript-unix.txt

Date: Thu, 29 Oct 1998 17:09:23 -0600 From: Ryan Gray To: [email protected] Subject: Re: Javascript bug in Netscape Communicator 4.5 Hello, Just wanted to add that Netscape Communicator 4.5b2 on Slackware Linux 3.5 kernel 2.0.34 is susceptible to this also. I was able to get the script to read...

CVE-1999-0466

The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device...

Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access

Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access source: https://www.securityfocus.com/bid/197/info On January 28, 1999, Georgi Guninski originally reported a vulnerability in Internet Explorer 4.x. Internet Explorer 4.x's implentation of Cross-frame security could be bypassed ...

Microsoft Internet Explorer 5.0.1 - Invalid Byte Cross-Frame Access

source: https://www.securityfocus.com/bid/197/info On January 28, 1999, Georgi Guninski originally reported a vulnerability in Internet Explorer 4.x. Internet Explorer 4.x's implentation of Cross-frame security could be bypassed if "%01" is appended to an arbitrary URL. If the specially malformed...

CVE-1999-1103

dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter...

CVE-1999-1494

colorview in Silicon Graphics IRIX 5.1, 5.2, and 6.0 allows local attackers to read arbitrary files via the -text argument...

Security Update, February 13, 2002 (MSXML 4.0)

This update resolves the "XMLHTTP Control Can Allow Access to Local Files" security vulnerability in Microsoft XML MSXML 4.0 and is discussed in Microsoft Security Bulletin MS02-008. Download now to help prevent a malicious user from reading the files on your computer when you visit a specially...