[Full-disclosure] nVidia.com [Url Redirection flaw]
rjcamarero at gmail.com
Thu Mar 26 05:09:38 GMT 2009
_You_ are two dim to imagine that this issue is more like a bug than a
vulnerability. If _you_ did try to imagine it, your head would probably
explode and xssme would ooze out.
On Thu, Mar 26, 2009 at 12:42 AM, Nick FitzGerald
<nick at virus-l.demon.co.uk>wrote:
> Rubén Camarero wrote:
> > What great references. Owasp isn't the king of vulnerability information,
> > course a website named XSSed is going to count this as super serious, and
> > while I respect Insecure.. these days, people have exploited web bugs to
> > their max (and I'm waiting for more), but they aren't directly serious.
> > DIRECTLY is the key word.
> No, but just because this kind of vulnerability is "only" indirectly
> serious dosen't mean that they aren't serious.
> Just because _you_ are too dim to imagine a way that someone can profit
> significantly from exploiting this does not mean that there are not such
> methods, NOR that use of such exploits won't "damage" nVidia.
> Whether nVidia (and others affected by so many similar vulnerabilities)
> will see this and decide to take action is what really matters. In this
> regard, I certainly hope that you do not work for, or consult with, or
> otherwise represent the view of nVidia on this issue.
> Nick FitzGerald
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
-------------- next part --------------
An HTML attachment was scrubbed...
Full-Disclosure is hosted and sponsored by Secunia.