full-disclosure - KDE 3.2.2 (sarge) Konqueror suffers XSS vuln.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <200410271545.21782.yanosz@gmx.net>
From: yanosz at gmx.net (Yanosz)
Subject: KDE 3.2.2 (sarge) Konqueror suffers XSS vuln.

Package: Konqueror
Version: 3.2.2-1 (sarge)
Severity: Important

In contrast to other browsers like firefox, Konqueror allows JavaScript to 
access other frames in a frameset, loaded with from different (sub)domain. By 
that enclosed / secret data can be read through a hidden frameset.
See http://groenndemon.de/bla for demonstration.

(I'd like also to thank the webmaster for motivating me to explore that issue 
and setting a wegpage up for demonstration)

(Translation: Action ?ndern -> Change action
Passwort klauen -> steel password
Abschicken -> submit)

Please verify this issue on other versions - 3.1.4 seems to be affected as 
well.

Keep smiling
yanosz