FW: Re: not confirmed but i wonder what this would do

From: itm@itmo.dyndns.org
Date: 12/29/01 

Date: Sat, 29 Dec 2001 21:33:23 +0200 (EET)
From: itm@itmo.dyndns.org
To: vuln-dev@securityfocus.com

forwarding his to vuln-dev like i was told.

> I havent tested this but i wonder if this could be used as a DoS attack:
>
> 1.embed a string to a cookie which matches with some virus string (like that
> example virus-detector string, cant remember its name)
>
> 2.browser usually saves the cookie straight into a file
>
> 3.anti-virus program finds out that there is a virus in the file since it
> matches the string, and quarantines /deletes the file and pops up a dialog
>
> 4. what then? IE dies since it cant access the cookie file? user is very
> confused? browsing is halted atleast? will the antivirus program intercept the
> attack from the http response already or will it get into the file and cause
> this effect? what can you do to prevent stuff like this? naturally disable
> cookies or not browse the site but..
>
> gotta test this but now i havent got the time.
>
>
> Markus Mikkolainen
>

Relevant Pages

  • Re: DESPERATE: FormsAuthentication Problem
    ... >>> database and create a semicolon delimited string listing the roles ... >>> them in the forms authentication cookie. ... >>> Dim authTicket As FormsAuthenticationTicket = New ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: How to login to a site using cookie? (not applet)
    ... What about Cookie? ... /** Post a string to an URL and get the reply as a string. ... // InputStream before completely writing out your output ... protected PasswordAuthentication getPasswordAuthentication() ...
    (comp.lang.java.programmer)
  • Re: Strange Role-Based authentication problem!
    ... I'd run Trace=true on your page to see if you're getting two ASP.NET forms authentication cookies. ... Since you're setting the cookie manually and then callings FormsAuth.SetAuthCookie, it's also adding in its own cookie. ... dsn.Close; string strRole = ""; ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Cookie question
    ... that grabs a cookie value: ... why is it checking if endStr equals to false? ... boolean value is required a number type-converts to boolean as; ... returns the index of the argument string within the subject string as an ...
    (comp.lang.javascript)
  • Re: Ticket disappears when browser is closed
    ... be careful - if the cookie is save to the users harddrive - anyone who has access to that directory can grab the cookie and bypass authentication. ... Dim New DatabaseUser ... Dim userData As String = DatabaseUser.UserData ... ByVal PersonID As Integer, ByVal roles As String) ...
    (microsoft.public.dotnet.framework.aspnet.security)