SecurityRatty: Open redirect vulnerabilities article

This is cache of http://holisticinfosec.blogspot.com/2008/06/open-redirect-vulnerabilities-article.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Open redirect vulnerabilities article - (IN)SECURE Issue 17

2008-06-26 10:18:00 by Russ McRee in HolisticInfoSec.org

I've written a comprehensive piece on the dangers of open redirects that's been published in Issue 17 of (IN)SECURE Magazine. Page 43 for your reading pleasure.
"An open redirect is a vulnerability that exists when a script allows redirection
to an external site by directly calling a specific URL in an unfiltered,
unmanaged fashion, which could be used to redirect victims to unintended,
malicious web sites."
This issue is a giant pet peeve of mine; the article is intended to increase awareness of the dangers of this vulnerability and promote mitigation.

del.icio.us | digg