RE: Script Injections

  • From: "David Farinic" <davidf@xxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 25 Feb 2005 18:30:54 +0100

And in which of those RFC & section are character "<" or ">" forbidden
in Request-URI used in Request-Line with method GET?

I read it but I didn't find it. Somebody who knows pls Help me. 

Regards David Farinic.

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Friday, February 25, 2005 5:06 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Script Injections

http://www.ISAserver.org

Here y'go:
http://www.ietf.org/rfc/rfc1945.txt
http://www.ietf.org/rfc/rfc2396.txt
http://www.ietf.org/rfc/rfc1738.txt
http://www.ietf.org/rfc/rfc2616.txt

-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: Rob Moore [mailto:RMoore@xxxxxxxx] 
Sent: Thursday, February 24, 2005 06:45
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Script Injections

http://www.ISAserver.org

More importantly--what about those RFCs??

Rob 

-----Original Message-----
From: Jim Harrison [mailto:Jim@xxxxxxxxxxxx] 
Sent: Thursday, February 24, 2005 9:42 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Script Injections

http://www.ISAserver.org

"legit" sites need to rethink their web usage.  Humungo request URLs are
unnecessary and in many cases (like this), irresponsible.

At no time was the request URL filter offered as a "be-all, end-all"
solution - just a protection for this one attack mechanism (and frankly,
the most often used - so the odds are with us, Obi-Wan).

You're still arguing the "attack happens at the web server,
therefore..", which is incorrect.
We're talking about applying a blocking filter at the ISA that serves
EBay clients, not EBay web servers (for the record, PayPal is a
dangerous, irresponsible outfit).
I don't give a rats a$$ if the web site is vulnerable - I do care if I'm
part of the attack.
My ISA doesn't protect EBay - it protects me from EBay.

  
This mail was checked for viruses by GFI MailSecurity. 
GFI also develops anti-spam software (GFI MailEssentials), a fax server (GFI 
FAXmaker), and network security and management software (GFI LANguard) - 
www.gfi.com 



Other related posts: