Bugtraq mailing list archives

MS IE Password inputs


From: Jon Embury <jon.embury () f1solutions com au>
Date: Wed, 21 Nov 2001 08:28:14 +1100

Just something I've noticed on IE 4 & 5.5

If you enter a password that contains a mix of non-alphabetic and alphabetic
characters to an MS IE password input and then use the keyboard to select it
while holding down tab the cursor / selected region jumps between the
non-alphabetic characters in exactly the same manner as it does when you
apply the same technique in word, Interdev, vb etc.

It doesn't reveal the password, but it would seem to reveal at least some of
the structure.

Eg

1 2 3 4 5


Jon Embury
Developer, F1 Solutions
www.f1solutions.com.au


Current thread: