Re: NTLM authentication broken for Mozilla/3.0 User-Agents

From: Henrik Nordström <henrik_at_henriknordstrom.net>
Date: Wed, 12 Jan 2011 11:00:04 +0100

ons 2011-01-12 klockan 12:57 +1300 skrev Amos Jeffries:

> There are two cases here, the Netscape one, yes is close to none.
> However as you pointed out there are download agents using Mozilla/3.0.
> How certain are we that the second hack case for that agent string is
> not aimed at a popular one of them?

Those most likely do not share the same bug, but selected the
Mozilla/3.0 version string for other reasons (to not be as easily
identified as a download agent).

Regards
Henrik
Received on Wed Jan 12 2011 - 10:00:08 MST

This archive was generated by hypermail 2.2.0 : Wed Jan 12 2011 - 12:00:04 MST