Re: WWW Security Hole

Martin Hamilton ([email protected])
Thu, 12 Aug 1993 18:10:52 +0100 (BST)


Marc VanHeyningen said:

> - Is plain gopher sans WWW vulnerable to this same problem? Do they
> know about it? If not, telling them (and also CERT) would be a good idea.

I've just verified this myself. Oops!!

Idea:

How about patching clients so they have a list of "dodgy ports",
like SMTP, and ask the user whether to carry on if they get given
a URL that points to one?