Full Disclosure mailing list archives

Re: (no subject)


From: Valdis.Kletnieks () vt edu
Date: Fri, 05 Dec 2003 21:42:32 -0500

On Sat, 06 Dec 2003 11:00:35 +1300, Nick FitzGerald <nick () virus-l demon co uk>  said:

Indeed -- this is a classic exploit of a classic case of several 
_really, really BAD_ design decisions.

Mea culpa.  Ignore my previous posting.

I thought you were flaming the guys at visa.com, when most of the blame goes to
the crackheads who desighed the HTTP URI format and the crackheads at MS who
implemented it. ;)

Attachment: _bin
Description:


Current thread: