OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: SMILER (smilerPTHOST.COM)
Date: Mon Apr 02 2001 - 07:15:03 CDT

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

     Well it can happen easily at the application level, if uīve got a script in
     your server that retrives content from other urlīs and then displays it in
     someway, then a user can easily change the url and check whatever he wants
     using your server as the "visitor".

     smiler.

    > ----- Original Message -----
    > From: "IT Professionals" <itpltdINDIGO.IE>
    > To: <VULN-DEVSECURITYFOCUS.COM>
    > Sent: Friday, March 30, 2001 1:25 PM
    > Subject: Using IIS Server 4 as a relay
    >
    >
    > > Has anyone had experience of an external unwanted client using IIS
    version
    > 4
    > > as a proxy to get to other WEB sites on the internet, even though the
    > proxy
    > > service has been disabled. A kind of IP Address spoof.
    > >
    >