×

Announcing: Slashdot Deals - Explore geek apps, games, gadgets and more. (what is this?)

Thank you!

We are sorry to see you leave - Beta is different and we value the time you took to try it out. Before you decide to go, please take a look at some value-adds for Beta and learn more about it. Thank you for reading Slashdot, and for making the site better!

Practical HTTP Host header attacks

Anonymous Coward writes | about a year and a half ago

0

An anonymous reader writes "Trusting HTTP_HOST and its cousin SERVER_NAME has long been regarded as risky behavior. Nonetheless, plenty of popular web frameworks and applications still implicitly treat these user-supplied variables as entirely dependable. Practical HTTP Host header attacks introduces and illustrates two techniques that exploit such mistakes in Django, Joomla, Gallery and Varnish to poison caches and password reset emails alike. If only there was a canonical solution..."

Sorry! There are no comments related to the filter you selected.

Check for New Comments
Slashdot Login

Need an Account?

Forgot your password?