Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos network security services platform







Bugtraq: File downloads in Opera at known locations

File downloads in Opera at known locations

From: Rohit Dube <rohit_at_kritikalsolutions.com>
Date: Thu, 29 Jul 2004 11:38:31 +0530

Hi,
 This is just a question. While using opera, I observed that as soon as it
prompts you for file download, it simultaneously starts the download with
same file extension in its %USERPROFILE/application data/opera/cache. Even
if the user afterwards chooses cancel, this temporary file does not get
deleted. So if the file size was very small, it will get downloaded
completely. Reported this to opera and they are convinced this is not a
problem (bugid 148412). They do not have problems such as directory
traversal causing file dropping in user startup etc.
Is this a problem? Can this be used in conjunction with some other
vulnerability to get access to the system?

Thanx
Rohit Dube

----The reader this message encounters not failing to understand is
cursed.----
Received on Jul 29 2004

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]