lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Mon, 23 Aug 2010 10:35:32 -0700
From: Tim <tim-security@...tinelchicken.org>
To: Aditya K Sood <0kn0ck@...niche.org>
Cc: bugtraq@...urityfocus.com, websecurity@...appsec.org
Subject: Re: Google Chrome: HTTP AUTH Dialog Spoofing through Realm
 Manipulation (Restated)

Hi Aditya,

> Google Chrome ( 5.0.375.127 and previous versions) suffers from HTTP
> Auth Dialog spoofing vulnerability due to possible
> realm manipulation in the HTTP header. Previously, Google chrome has got
> a similar bug which can be seen on the following link


How is this significantly different than the issues described in:
  http://www.vsecurity.com/download/papers/WeaningTheWebOffOfSessionCookies.pdf
?

See the section on page 11 entitled "Weak User Interfaces for HTTP
Authentication"

In your video, I didn't see precisely what realm string was sent or
what the overall auth header was, so it's hard to tell.  Also, it may
be that variants of these attacks still work in Firefox.

Note that the above paper was sent to all major browser vendors around
the time that Google was notified about (and fixed) this bug:
  http://code.google.com/p/chromium/issues/detail?id=32718

tim

Powered by blists - more mailing lists