Home page logo

bugtraq logo Bugtraq mailing list archives

Re: The Dangers of Allowing Users to Post Images
From: "Sverre H. Huseby" <shh () thathost com>
Date: Tue, 19 Jun 2001 09:01:18 +0200

(First, thanks a _lot_ for Squid, Henrik!)

[Henrik Nordstrom]

|   Further, if you pass around the ticket in URLs then this class of
|   attacks will also have full access to the ticket from the referer
|   URL, so if you only base your security on these two measurements
|   (client IP + ticket present in the URL) then your are most likely
|   at risk here.

There are, of course, no reason to add a ticket to off-site links.
The tickets are only understandable by our web application.

Tickets should only be tied to actions that have side effects on our
server (for which GET may be Wrong Thing anyway).  If this principle
is followed, I can't see how anyone would be able to pick up Referers
containing tickets without having access to our server.  Please
enlighten me if I've misunderstood anything here.


<URL:mailto:shh () thathost com>

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]