Re: [Full-disclosure] Attacking the local LAN via XSS

To: "pdp (architect)" <pdp.gnucitizen@xxxxxxxxxxxxxx>
Subject: Re: [Full-disclosure] Attacking the local LAN via XSS
From: Schanulleke <schalulleke@xxxxxxxxx>
Date: Fri, 04 Aug 2006 09:21:56 +0200
Cc: full-disclosure@xxxxxxxxxxxxxxxxx, bugtraq@xxxxxxxxxxxxxxxxx, pen-test@xxxxxxxxxxxxxxxxx, webappsec@xxxxxxxxxxxxxxxxx
Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:user-agent:mime-version:to:cc:subject:references:in-reply-to:content-type:content-transfer-encoding; b=V5wC0+JXdmJuvP9pf/lCGKNhyCKaEPOsiLYCkbkMghKRS3ZC02rxo+ogRSmWJGozEI6TBVhfRNgTDjM5v0LlHB0dnwyYhR6FsoHhiYC7N1zhxAmtMXfxWj5tByehTvjnB5oAsE37sAQcQQGwxpTCwTQs3+5C1dlTUNV7hKeKgg4=
In-reply-to: <6905b1570608031635s3c4396denbe061ffae0ef0617@xxxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <6905b1570608031635s3c4396denbe061ffae0ef0617@xxxxxxxxxxxxxx>
User-agent: Thunderbird 1.5.0.5 (Windows/20060719)

pdp (architect) wrote:

  2. border router vulnerable to XSS

Main lessons to be learned:
* The border still exists, but is only important for QoS purposes.
* Do not manage routers via http

Schanulleke.

References:
- Attacking the local LAN via XSS
  - From: pdp (architect)