Re: BrownOrifice can break firewalls! NOW MSIE

Hi, The same security hole, exists in MSIE too, with one restriction: url can't start with file:. But still the applet from outside site, can access you intranet servers including ftps and ALL sites you have access to. The demonstration of the bug is here: http://www.oltres.com/ms-bug/ Thanx,...

msie.5.0.cookies.txt

Date: Wed, 24 Mar 1999 01:16:36 -0400 From: Claudio Valderrama C. To: [email protected] Subject: MSIE 5 Hello. I hope this will avoid headaches to system administrators: - MSIE 5, when installed, changes silently the setting for the cookies to "Accept always" no matter how did you...

opera.txt

Date: Fri, 14 Aug 1998 09:54:09 +0800 From: "Zac Leow C.H" Subject: URL exploit to crash Opera Browser By putting an extra slash at the end of http:// tag will crash your opera browser. Tested on version 3.21 e.g. http:///opera.nta.no Seems to be save on Netscape and MSIE, they just generate an...

more.msie.5.favicon.ico.txt

Date: Mon, 3 May 1999 16:06:10 -0300 From: Flavio Veloso To: [email protected] Subject: MSIE 5 favicon bug Hi folks. When MSIE 5 users bookmark a page, the browser will request a file named "favicon.ico" which is to be used in the "Favorites" menu of the browser. Unfortunately MSIE 5 doesn't...

msie.5.0.setup.wizard.txt

Tue, 23 Mar 1999 11:41:24 +0200 Thor Kottelin Windows NT BugTraq Mailing List Thor Kottelin MSIE 5 installer disables screen saver After running the MSIE 5 installation wizard ie5setup.exe on two separate NT 4.0 SP4 machines - one Workstation, one Server - my screen saver Logon Screen Saver,...