full-disclosure - RE: FWD: Internet Explorer URL parsing vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <018901c3be9b$9ab0c430$a800a8c0@cryo>
From: clint at secureconsulting.com (Clint Bodungen)
Subject: RE: FWD: Internet Explorer URL parsing vulnerability

Well, using a straight link like the following works in an HTML email... but
not on a web page:

<a href="http://www.microsoft.com%01@....linux.org">Microsoft</a>

However, using this approach still allows the user to see the absolute URL
path in the task bar (with the %01 ommitted).

On the other hand... using the button and "unescape()" approach such as the
original example from this thread works from a web page but not from an HTML
email.

----- Original Message ----- 
From: "S G Masood" <sgmasood@...oo.com>
To: "Exibar" <exibar@...lair.com>; <full-disclosure@...ts.netsys.com>
Sent: Tuesday, December 09, 2003 1:00 PM
Subject: Re: [Full-Disclosure] RE: FWD: Internet Explorer URL parsing
vulnerability

>
> --- Exibar <exibar@...lair.com> wrote:
> > my favorite will be this one that I'm sure will
> > circulate:
> >
> > http://www.microsoft.com%01@....linux.org
> >
> >   :-)
>
> http://www.microsoft.com%01@....linux.org
>  wont work until you
> unescape('http://www.microsoft.com%01@....linux.org');
>