URL Parsing Bug in IE Invites Phishing Attacks
Larry Seltzer June 11 2004
A bug in fully patched versions of Microsoft's Internet Explorer Web
browser allows violations of the browser's security zones, with the
result that an unknown malicious site could assume the privileges of
more trusted zones.
Researchers on several security mailing lists have been discussing the
bug since yesterday and appear still to be learning about it.
The same vulnerability could be used for phishing attacks, in which the
URL in the address bar appears to be for one site but is in fact a link
to a different site. Both of these problems rely on certain
misconfigurations of the DNS and Web server on the malicious Web site ...
http://www.eweek.com/article2/0,1759,1611292,00.asp
[For security, switch to Netscape or Opera - Ed.]
--
Reliability:Speed:Security:Linux
