FratFiles

• Save Paper

Exploit Available: http://www.thoughtcrime.org/ie.html

From moxie@thoughtcrime.org Tue Aug 6 13:42:57 2002
Date: Mon, 5 Aug 2002 16:03:29 -0700 (PDT)
From: Mike Benham
To: bugtraq@securityfocus.com
Subject: IE SSL Vulnerability

========================================================================
Internet Explorer SSL Vulnerability 08/05/02
Mike Benham
http://www.thoughtcrime.org

========================================================================
Abstract

Internet Explorer's implementation of SSL contains a vulnerability that
allows for an active, undetected, man in the middle attack. No dialogs
are shown, no warnings are given.

========================================================================
Description

In the normal case, the administrator of a web site might wish to provide
secure communication via SSL. To do so, the administrator generates a
certificate and has it signed by a Certificate Authority. The generated
certificate......

View the rest of this paper...

Approximate Word Count: 743
Approximate Pages: 3 (250 words per double-spaced page)

Similar Essays

1. Internet Explorer Ssl Vulnerability
   

   Internet Explorer SSL Vulnerability Exploit Available: http://www.thoughtcrime.org/ie.html From moxie@thoughtcrime.org Tue Aug 6 13:42:57 2002 Date: Mon, 5 Aug 2002 16:03:29 -0700

2. Telecom
   

   of browsers that can be used to navigate the internet; some of the popular ones are Internet Explorer and Firefox. You can get news updates as they happen from your favorite

3. Online Banking
   

   of the data, passwords and the like. This has been addressed through Secured Socket Layer(SSL), a Transport Layer Security (TLS) system which involves an encrypted session between

4. Security On The Web
   

   user certification schemes, which rely on digital IDs. Netscape Communicator and Internet Explorer allow users to obtain and use personal certificates. Currently, a certification

5. Computing Science Research
   

   an increase in the communication of information (particularly with the regards to the internet) has been seen and consequently our own reliance on that information has