Re: Application-level Attacks

["Marcus J. Ranum" <mjr () ranum com>]

Paul D. Robertson wrote:
> Hmmm, but an SQL injection attack isn't really a protocol issue- it's an
> unexpected input issue- 

It's an application-specific flaw in the application accepting the input,
unless I really misunderstand how SQL injection works.

If the thing that is broken is an "application" then attacks against
that break are "application attacks" no?

mjr.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards