[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer

To: <bugtraq@securityfocus.com>
Subject: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
From: "Ward Taylor" <rfdhomer@windyplains.com>
Date: Mon, 9 Feb 2004 13:31:25 -0600

Hi:
There is a win2k registry setting which allows the default .dll search order
to be changed.
Key:
HKLM\SYSTEM\CurrentControlSet\Control\SessionManager
Value Name:
SafeDllSearchMode
Data:
0x1

Cheers

Follow-Ups:
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: Peter Pentchev <roam@ringlet.net>
- Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: "Nexus" <nexus@patrol.i-way.co.uk>

References:
- Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
  - From: "Disclosure From OSSI" <disclosure@ossecurity.ca>

Prev by Date: Re: clamav 0.65 remote DOS exploit
Next by Date: HelpCtr - allow open any page or run
Previous by thread: RE: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Next by thread: Re: Round One: "DLL Proxy" Attack Easily Hijacks SSL from Internet Explorer
Index(es):
- Date
- Thread