RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer

To: <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
From: "Ward Taylor" <rfdhomer@xxxxxxxxxxxxxxx>
Date: Mon, 9 Feb 2004 13:31:25 -0600
Importance: Normal
In-reply-to: <DHELIJMHOLKLHKFHGGGLEECLCAAA.disclosure@xxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hi:
There is a win2k registry setting which allows the default .dll search order
to be changed.
Key:
HKLM\SYSTEM\CurrentControlSet\Control\SessionManager
Value Name:
SafeDllSearchMode
Data:
0x1

Cheers

Follow-Ups:
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Nexus
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Peter Pentchev

References:
- Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Disclosure From OSSI

Prev by Date: Re: clamav 0.65 remote DOS exploit
Next by Date: HelpCtr - allow open any page or run
Previous by thread: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Next by thread: Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Index(es):
- Date
- Thread