[10574] in bugtraq
MSIE 4.0 Internet Content Advisor
daemon@ATHENA.MIT.EDU (Kristian Koehntopp)
Mon May 17 17:29:52 1999
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Message-Id: <19990516140653.A310@valiant.koehntopp.de>
Date: Sun, 16 May 1999 14:06:53 +0200
Reply-To: Kristian Koehntopp <kris@VALIANT.KOEHNTOPP.DE>
From: Kristian Koehntopp <kris@VALIANT.KOEHNTOPP.DE>
To: BUGTRAQ@NETSPACE.ORG
I was toying around with the Internet Content Advisor function
of MSIE 4.0 and has a few funny experiences. For example, I was
unable to remotely administer my IIS 3.0 anymore, because the
IISADMIN pages do not have PICS labels at all.
Also, I tried the following experiment: I cleaned my cache,
enabled the Content Advisor and accessed www.playboy.com. Of
course I was denied access, but I was able to fetch the start
page of the playboy from my cache directory afterwards (using
for example Word or Dreamweaver). MSIE did not delete cache
objects for which I should not have access permissions...
Kristian
--
Kristian Koehntopp, Knooper Weg 46, 24103 Kiel, +49 170 2231 811
"Yes, that would all be nice. However, as a friend of mine says, if frogs
had wings they would not bump their ass when they hop." -- dleblanc@iss.net
