[34877] in bugtraq

home help back first fref pref prev next nref lref last post

Opera Telnet URI Handler Vulnerability also applies to other browsers

daemon@ATHENA.MIT.EDU (Jannes)
Thu May 13 15:38:00 2004

Date: Thu, 13 May 2004 20:17:11 +0200
From: Jannes <ddos@arcor.de>
To: bugtraq@securityfocus.com
Message-ID: <20040513181711.GA5350@core>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15
Content-Disposition: inline

Hello,

a new Security Advicory by iDEFENSE describes an Opera Telnet URI Handler 
File Creation/Truncation Vulnerability.
<http://www.idefense.com/application/poi/display?id=104&type=vulnerabilities>

The described vulnerability also works on:
 - Konqueror (KDE <= 3.2.1) (and maybe other Browsers using the khtml engine?)
 - Firefox <= 0.8 on MacOS
 - Safari (MacOS, - only reported, don't know what version)


Sorry that this is not a reply to an iDEFENSE post but here arrived 
nothing, yet.


Regards,
Jannes


home help back first fref pref prev next nref lref last post