From: "Matt Parlane" <matt@zevi.net>
To: stewart.thompson@shaw.ca, netfilter@lists.netfilter.org
Subject: Re: Web Browser Information Leakage through NetFilter:
Date: Fri, 27 Sep 2002 13:44:48 +1200 [thread overview]
Message-ID: <02b801c265c7$76f489b0$0200a8c0@bart> (raw)
In-Reply-To: FLEKIPPLAEDMJMOOBBDPGEBBDAAA.stewart.thompson@shaw.ca
> I was redirected to some German web site.
> I couldn't read the text obviously, but the gist was I
> was insecure, it showed a completely accurate listing
> of all the folders on my Windows machine I was using
> the browser on at the time. Obviously I wasn't to please
> about this. I am assuming it is a function of the Browser
> and Server, and not a direct problem with my firewall.
> I am running IE V6 on that machine.
> So the question is, can a malicious website access
> Sensitive data with this method? Is there some way to block
> this with Netfilter and/or Browser settings?
Hi Stu...
This is probably an IFrame with a location of file:///C:/ which basically
shows you a listing of your c:\ directory. Pretty sneaky... but rest
assured that if this is what it is, they can't get at anything on your
machine.
Matt
prev parent reply other threads:[~2002-09-27 1:44 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2002-09-26 23:49 Web Browser Information Leakage through NetFilter: Stewart Thompson
2002-09-27 0:08 ` Antony Stone
2002-09-27 0:25 ` Rowan Reid
2002-09-27 0:52 ` Stewart Thompson
2002-09-27 0:52 ` Rowan Reid
2002-09-27 1:51 ` Chris Poupart
2002-09-27 4:46 ` Bishop
2002-09-27 5:41 ` Stewart Thompson
2002-09-27 1:44 ` Matt Parlane [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='02b801c265c7$76f489b0$0200a8c0@bart' \
--to=matt@zevi.net \
--cc=netfilter@lists.netfilter.org \
--cc=stewart.thompson@shaw.ca \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox