Sponsored White Papers, Webcasts, and Downloads
ZDNet Dictionary Definition
- DNS Rebinding
- A method for obtaining unauthorized access to the local network by fooling the Web browser into switching IP addresses from the Web server to a local computer. It is...
- Full DNS Rebinding Definition >>
ZDNet Resources
- sort by:
- Relevance
- Date
- Popularity
- Adobe patches 7 issues, including Pwn2Own contest flaw and DNS rebinding issues
- Adobe patches 7 issues, including Pwn2Own contest flaw and DNS rebinding issuesadobe was aware of pwn2own flaw since monthsadobe was aware of pwn2own flaw since months
- Discussion threads 2008-04-10
Additional Resources
- Adobe updates Flash Player 9 to fix six security holes
- Adobe has slapped another band-aid on its ever-present Flash Player to cover at least six documented security vulnerabilities that could expose users to a wide range of hacker attacks. The patch, rated "critical" by Adobe, affects Flash Player 9.0.124.0 on all platforms. Adobe is recommending that users...
- Blog posts 2008-11-06
- 2008 Pwnie Award nominees announced
- Well, after getting 134 nominations, and spending countless hours pulling out nominees, the judges for the 2008 Pwnie Awards have announced the final nominees to be voted on. From the site: The final list of nominees for the nine Pwnie Award categories is ...
- Blog posts 2008-07-21
- Taking ownership (pwnership) of content: Cross-site Scripting Google
- My good friend Billy Rios pictured to the right published another interesting exploit recently. It's a cross-site scripting exposure in spreadsheets.google.com, which is interesting because it's exploited by using the content-type returned by spreadsheets.google.com and a caching flaw on the part of Google. Here's some details from Billy's blog: I was...
- Blog posts 2008-04-16
- News to know: Microhoo; Adobe patch; Windows bloat; AMD
- Notable headlines: Larry Dignan: Yahoo goes nuclear vs. Microsoft: Inks limited Google ad deal; Microsoft fires back Mary Jo Foley: Microsoft-Yahoo-Google: The vicious antitrust circle Yahoo's strategy: Torpedo the Microsoft deal or up the offer? Garett Rogers: Google gets business from Yahoo...
- Blog posts 2008-04-10
- Adobe patches 7 issues, including Pwn2Own contest flaw and DNS rebinding issues
- Adobe published an advisory covering issues, including a fix for the Pwn2Own flaw that we previously discussed here. Adobe's details are published here. One of the issues that was patched was discovered by myself and fellow researcher (and co-worker at Ernst & Young's Advanced Security Center) Rob Carter, see the picture to the...
- Blog posts 2008-04-09
- Defeating the Same Origin Policy part 1
- The Same Origin Policy is one of the guiding principles that seek to protect our browsing experience. The Same Origin Policy was originally released with Netscape Navigator 2.0 and has been incorporated in one form or another in every major browser since. The concept has additionally been extended...
- Blog posts 2008-03-14
- Dynamic Pharming Attacks and Locked Same-Origin Policies for Web Browsers
- This paper describes a new attack against web authentication, which the paper calls dynamic pharming. Dynamic pharming works by hijacking DNS and sending the victim's browser malicious Javascript, which then exploits DNS rebinding vulnerabilities and the name-based same-origin policy to hijack a legitimate session after authentication has taken place. As...
- White papers 2007-11-02
- << Previous
- page 1 of 1
- Next >>
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Keep Up With The Latest In Document Management with The DocuMentor.
-
Doc delivers the scoop on today's enterprise content management, printer maintenance, and all other issues related to document management. It's the DocuMentor Blog.
- Learn more >>
- Reduce risk. Reduce complexity. Increase reliability.
-
A simplified IT environment isn't just less complex. It's also more reliable. Standardize on a single Linux platform with SUSE Linux Enterprise from Novell, and get the world's most interoperable Linux
- Learn more >>
- New Online Dashboard for IT Leaders
-
Read about top issues IT decision-makers face every day, plus get cost-effective solutions to real-life IT problems.
- Learn more >>
- Learn more about tools to grow your business
-
The Business Essentials Guide provides you useful tools and templates to help grow your business and save you time with automated shipping solutions.
- Save time with the UPS Business Essentials Guide
- Microsoft Dynamics CRM Online - Free Six-Month Trial for Eligible Organizations
-
Microsoft Dynamics CRM Online provides fast online access, simple contact management and better sales performance for a low monthly cost - the best value on the market today.
- Learn more about the free, six-month trial offer>>
Meet Doc
-
-
Here to help you with your Document Management Needs
- Doc is an enigma. Born to a Russian ballerina and a German electrical engineer, he grew up in various locations in the United States. He’s seen the insides of more brands, versions, and generations of printer and printer-related hardware than almost anyone.
- To learn more about this mysterious figure check out his blog on ZDNet and his Workspace on TechRepublic. You’ll be glad you did.
-
Produced by
ZDNet and -
