full-disclosure - Re: Internet Explorer URL parsing vulnerabi lity

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20031211204437.GB23976@sherohman.org>
From: esper at sherohman.org (Dave Sherohman)
Subject: Re: Internet Explorer URL parsing vulnerabi lity

On Thu, Dec 11, 2003 at 10:36:41AM -0800, Jim Race wrote:
> Check that. With Moz 1.5:
> 
> Opening in a new *TAB* takes one to MS. Clicking the link takes one to 
> /. with "http://www.microsoft.com%01@...shdot.org/" in the address bar.
> 
> That's odd.

Not all that odd.  Take a look at the source for that link:

<a href="http://www.microsoft.com" onclick="location.href=unescape('http://www.microsoft.com%01@...shdot.org/');return false;">

The link actually _is_ to microsoft initially, but the onclick
handler changes it to microsoft%01@...shdot.  If you hit it without
triggering the onclick handler (say, by middle-clicking to open it in
a new tab), then going to microsoft is to be expected.

-- 
The freedoms that we enjoy presently are the most important victories of the
White Hats over the past several millennia, and it is vitally important that
we don't give them up now, only because we are frightened.
  - Eolake Stobblehouse (http://stobblehouse.com/text/battle.html)