RE: Heads up! Yet another IE bug

["Steve Richter" <srichter@xxxxxxxxxxxxx>]

from:

http://www.eweek.com/article2/0,4149,1409620,00.asp

"...Security researchers confirmed a vulnerability in Internet Explorer 6
that could let an attacker display a fake URL in the browser's address bar
in an attempt to disguise the real domain, according to a security bulletin
released on Tuesday by Danish security company Secunia Ltd. "


isnt this the same as a web site that is selling something has a link to
paypal for secure payment.  but the link is actually to the thief's site
that is made to look just like the paypal site, and the customer
unknowningly keys in their paypal password on the bad guys site?

the thing that this ie flaw allows is the ability to show the paypal url in
the address line.  how often do people look at the url line?

-Steve



-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx]On Behalf Of Hans Boldt
Sent: Thursday, December 11, 2003 10:35 AM
To: midrange-l@xxxxxxxxxxxx
Subject: Heads up! Yet another IE bug


I know the reporting of possible exploits in IE is old hat, but here's a
new one that everyone should be aware of. Read about it at Slashdot:

http://slashdot.org/articles/03/12/11/1319212.shtml

Cheers! Hans


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.