bugtraq - "netscape navigator" is cracked.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20030429091243.15425.qmail@www.securityfocus.com>
Date: 29 Apr 2003 09:12:43 -0000
From: Liu Die Yu <liudieyuinchina@...oo.com.cn>
To: bugtraq@...urityfocus.com
Subject: "netscape navigator" is cracked.

##################
#
#  Readers' Favorite - Make Notes in Your Browser today!
#  http://liudieyuinchina.vip.sina.com/domex/aPoP/
#  http://domex.int.tc/
#
##################

"netscape navigator" is cracked.
("that's all" is end of file if you are in a hurry)

[tested]
OS:Windows Server 2003 Enterprise
Browser: "Netscape Navigator 7.02"
"Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.0.2) Gecko/20030208 
Netscape/7.02 "

[demo]
at
http://liudieyuinchina.vip.sina.com/DomainDot/DomainDot-MyPage.htm
or
http://umbrella.mx.tc ==> "DomainDot-MyPage" section

[screenshot]
at
http://liudieyuinchina.vip.sina.com/DomainDot/DomainDot-Screenshot.htm
or
http://umbrella.mx.tc ==> "DomainDot-Screenshot" section

[exp]
URL "http://[Domain]./[DirectoryName]/[FileName]"(one more dot 
after "[Domain]") will actually navigate your browser to:
"http://[Domain]/[DirectoryName]/[FileName]".
then "document.domain" is "[Domain]."(one more dot in "document.domain").

try to execute javascript:
[CODE.JAVASCRIPT]document.domain=""

after being set to an empty string, document.domain is auto-caculated to 
be [DirectoryName].
of course, "[DirectoryName]" can be "www.paypal.com", but you still cannot 
access document at "www.paypal.com" by just having "www.paypal.com" 
as "document.domain".

now, you make "document.domain" to be "w.www.paypal.com", then set it 
to "www.paypal.com". 
you can access document at "www.paypal.com" now.

that's all.

[how]
do you still remember "IE dot bug"?
( http://online.securityfocus.com/archive/1/273168/2002-05-18/2002-05-
24/0 )

they are so similar, aren't they?

[gean]
i hope you'll get well soon!

[people]
wish you all a nice day!

greetings to:
Sandblad(the guy who found "IE dot bug"), "the Pull", dror( 
http://www.drorshalev.com/ ), bin, gean, dross and iainm.

##################
#
#  Readers' Favorite - Make Notes in Your Browser today!
#  http://liudieyuinchina.vip.sina.com/domex/aPoP/
#  http://domex.int.tc/
#
##################

-----
all mentioned stuff can always be found at:
Umbrella: MaX TeCh

http://umbrella.mx.tc