Intrusion Detection Systems mailing list archives

Re: IE 5


From: shio () st rim or jp (Makoto Shiotsuki)
Date: Mon, 04 Oct 1999 10:52:45 +0900




Going on to my question, I was recently using Micro$oft Internet Explorer
5.0 to do FTP to a site which requires me to login , so I do login and get
my files. the next time I typed the words "ftp://"; in the location box in
the browser, to my shock it displayed the history of ftp with my login
name and password in clear text like "password () domain com">ftp://loginname:password () domain com</A>"
So if anybody who  used that brower to ftp will have access to my account.

Hi,

Check out the following;

  http://ntbugtraq.ntadvice.com/default.asp?
               pid=36&sid=1&A2=ind9908&L=NTBUGTRAQ&P=R3163
  http://www.securityfocus.com/vdb/bottom.html?vid=610

Makoto Shiotsuki



Current thread: