WASC-Articles: 'The Insecure Indexing Vulnerability - Attacks Against Local Search Engines' By Amit Klein

robert_at_WEBAPPSEC.ORG
Date: 02/28/05


Date:         Mon, 28 Feb 2005 10:59:01 -0500
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

The Web Application Security Consortium is proud to present 'The Insecure Indexing
Vulnerability - Attacks Against Local Search Engines' written by Amit Klein. In
this article Amit discusses the risks associated with using a local search engine
that indexes its content locally.

This document can be found at http://www.webappsec.org/articles/ .

Regards,

- Robert Auger

articles_at_webappsec.org
http://www.webappsec.org

------------------------------------------------------------------------------------
Are you interested in writing a 'Guest Article' for the WASC? Additional information
on article guidelines may be found at http://www.webappsec.org/articles/. Inquires
can be sent to articles_at_webappsec.org

"Contributed articles may include industry best practices, technical information about
current issues, innovative defense techniques, etc. NO VENDOR PITCHES OR MARKETING
GIMMICKS PLEASE. We are only soliciting concrete information from the experts on the
front lines of the web application security field."
<a href="http://www.webappsec.org">http://www.webappsec.org>
------------------------------------------------------------------------------------

--
NTBugtraq Editor's Note:
Most viruses these days use spoofed email addresses. As such, using an Anti-Virus product which automatically notifies the perceived sender of a message it believes is infected may well cause more harm than good. Someone who did not actually send you a virus may receive the notification and scramble their support staff to find an infection which never existed in the first place. Suggest such notifications be disabled by whomever is responsible for your AV, or at least that the idea is considered.
--


Relevant Pages