Showing 1 - 3 of 3

Files from Thomas Henlich

webftpInclude.txt: Posted Jan 8, 2006; Authored by Thomas Henlich; A file inclusion vulnerability exists in WebFTP version 1.2.6 in webftp.php.; tags | exploit, php, file inclusion; SHA-256 | 5be93b7e1c3861a44e8fd2e42aaf49adbbcf18c9cfd4ded89e929284fa6939f2; Download | Favorite | View

thunderbirdWeak.txt: Posted Oct 27, 2005; Authored by Thomas Henlich; Mozilla Thunderbird SMTP down-negotiation behavior allows a man-in-the-middle (MITM) attack to bypass TLS initialization and/or downgrade CRAM-MD5 to PLAIN authentication, leading to exposure of authentication information. Failure in CRAM-MD5 authentication also leads to exposure of authentication information to a passive eavesdropper. Affected versions: Mozilla Thunderbird 1.0.7 (20050923), Mozilla Thunderbird 1.5 Beta 2 (20051006), possibly other programs using the Mozilla mail component.; tags | advisory; SHA-256 | d7c2c62f53981de1b1e61fbb11de9278cff73769ab86c648b175814f320ba698; Download | Favorite | View

thunderbird-mitm.txt: Posted Oct 21, 2005; Authored by Thomas Henlich; Mozilla Thunderbird SMTP down-negotiation behavior allows a man- in-the-middle (MITM) attack to bypass TLS initialization and/or downgrade CRAM-MD5 to PLAIN authentication, leading to exposure of authentication information. Failure in CRAM-MD5 authentication also leads to exposure of authentication information to a passive eavesdropper.; tags | advisory; SHA-256 | 45fbeadf936771da0e38eba38836f70be1b8a427bb908f4c6addba8fc4fef977; Download | Favorite | View

Page 1 of 1 Back 1 Next

Top Authors In Last 30 Days