Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: International Domain Name [IDN] support in modern browsers allows attackers to spoof domain name URLs + SSL certs.
From: Jerome ATHIAS <jerome.athias@xxxxxxx>
Date: 8 Feb 2005 14:47:24 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

In-Reply-To: <20050208043921.17342.qmail@xxxxxxxxxxxxxxxxxxxxx>

Verified under Windows XP SP2 with Firefox 1.0 (MOOX M3)

SpoofStick (http://www.corestreet.com/spoofstick/) is also tricked (what about 
netcraft...?).

Regards,
Jerome

Prev by Date: [SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution
Next by Date: Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994
Previous by thread: [SECURITY] [DSA 671-1] New xemacs21 packages fix arbitrary code execution
Next by thread: Integer overflow and arbitrary files deletion in RealArcade 1.2.0.994
Index(es):
- Date
- Thread