[31433] in bugtraq
Re: Fwd: IE 5.x keep-alive session hijacking
daemon@ATHENA.MIT.EDU (Waldo Bastian)
Thu Sep 4 18:30:03 2003
From: Waldo Bastian <bastian@kde.org>
To: "Domas Mituzas" <Domas.Mituzas@microlink.lt>
Date: Thu, 4 Sep 2003 22:22:36 +0200
In-Reply-To: <200309041745.48934.mueller@kde.org>
Cc: <bugtraq@securityfocus.com>
MIME-Version: 1.0
Content-Disposition: inline
Content-Type: Text/Plain;
charset="iso-8859-1"
Message-Id: <200309042222.38028.bastian@kde.org>
Content-Transfer-Encoding: 8bit
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thursday 04 September 2003 17:45, you wrote:
> Hi,
>
> sorry for being innacurate, but I noticed that our transparent-proxy system
> is trying (and even to succeeds at some level) to hijack client http
> connections.
Sounds like a bug in your proxy that it doesn't filter the Proxy-Connection
headers out.
See e.g. http://ftp.ics.uci.edu/pub/ietf/http/hypermail/1999/0040.html
Cheers,
Waldo
- --
bastian@kde.org -=|[ SuSE, The Linux Desktop Experts ]|=- bastian@suse.com
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org
iD8DBQE/V58NN4pvrENfboIRAub0AKCOIiBtyN+wXvIPr64RZMM92KaQ8gCfdlP2
EbxkGX0XmCu8owndG2cfLVo=
=Bo7H
-----END PGP SIGNATURE-----
