SEC-CONSULT Security Advisory 20051021-0 – Since april 2005 SEC-Consult has found 5+ serious vulnerabilities within Yahoo’s webmail systems. All of them have been fixed in the production environment. Nevertheless SEC-Consult believes that input-validation thru blacklists can just be a temporary solution to problems like this. From our point of view there are many other applications vulnerable to this special type of problem where vulnerabilities of clients and servers can be combined.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40950/SEC-20051021-0.txt
Source: https://packetstormsecurity.com/files/40950/SEC-20051021-0.txt.html