Re: [Full-disclosure] nVidia.com [Url Redirection flaw]

[Rubén Camarero <rjcamarero@xxxxxxxxx>]

_You_ are two dim to imagine that this issue is more like a bug than a
vulnerability. If _you_ did try to imagine it, your head would probably
explode and xssme would ooze out.

On Thu, Mar 26, 2009 at 12:42 AM, Nick FitzGerald
<nick@xxxxxxxxxxxxxxxxxxx>wrote:

> Rubén Camarero wrote:
>
> > What great references. Owasp isn't the king of vulnerability information,
> of
> > course a website named XSSed is going to count this as super serious, and
> > while I respect Insecure.. these days, people have exploited web bugs to
> > their max (and I'm waiting for more), but they aren't directly serious.
> > DIRECTLY is the key word.
>
> No, but just because this kind of vulnerability is "only" indirectly
> serious dosen't mean that they aren't serious.
>
> Just because _you_ are too dim to imagine a way that someone can profit
> significantly from exploiting this does not mean that there are not such
> methods, NOR that use of such exploits won't "damage" nVidia.
>
> Whether nVidia (and others affected by so many similar vulnerabilities)
> will see this and decide to take action is what really matters.  In this
> regard, I certainly hope that you do not work for, or consult with, or
> otherwise represent the view of nVidia on this issue.
>
>
> Regards,
>
> Nick FitzGerald
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>



-- 
Rubén Camarero
CCNA, CISSP

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/