RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: <bugtraq@securityfocus.com>
Subject: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
From: "Ward Taylor" <rfdhomer@windyplains.com>
Date: Mon, 9 Feb 2004 13:31:25 -0600
Importance: Normal
In-reply-to: <DHELIJMHOLKLHKFHGGGLEECLCAAA.disclosure@ossecurity.ca>

Hi:
There is a win2k registry setting which allows the default .dll search order
to be changed.
Key:
HKLM\SYSTEM\CurrentControlSet\Control\SessionManager
Value Name:
SafeDllSearchMode
Data:
0x1

Cheers

Follow-Ups:
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Nexus
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Peter Pentchev

References:
- Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Disclosure From OSSI

Prev by Date: Re: clamav 0.65 remote DOS exploit
Next by Date: HelpCtr - allow open any page or run
Previous by thread: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Next by thread: Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Index(es):
- Date
- Thread

[Index of Archives] [Linux Security] [Netfilter] [PHP] [Yosemite News] [Linux Kernel]

Powered by Linux