OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
RE: double slash moves cache from INTERNET zone to MYCOMPUTER zone

From: Thor Larholm (thorpivx.com)
Date: Wed Nov 05 2003 - 14:56:10 CST

I can only reproduce this from the My Computer zone, which already
allows arbitrary command execution through the codeBase vulnerability -
I don't see anything new in this, but feel free to correct me.

Regards
Thor Larholm
Senior Security Researcher
PivX Solutions, LLC

Get our research, join our mailinglist - http://pivx.com/larholm/

-----Original Message-----
From: Liu Die Yu [mailto:liudieyuinchinayahoo.com.cn]
Sent: Wednesday, November 05, 2003 2:32 AM
To: bugtraqsecurityfocus.com
Subject: IE: double slash moves cache from INTERNET zone to MYCOMPUTER
zone

Snip
http://www.securityfocus.com/archive/1/343474/2003-11-02/2003-11-08/0