| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <NEONISP1sA91E9GQvnb0000005a@smtp.neonisp.com> Date: Thu May 19 11:12:35 2005 From: djsb at neonisp.com (Domingos Bruges) Subject: RE: Security issue in Microsoft Outlook Outlook does that when composing an email in HTML format, where you can have any name associated to a link with a <a href> tag. The example you give is something like <a href="http://www.cybertrion.com"> http://www.foo-labs.info</a> Regards, -- Domingos Bruges -----Original Message----- From: Bakchodiya [mailto:bakchodiya@...oo.com] Sent: quarta-feira, 18 de Maio de 2005 21:28 To: bugtraq@...urityfocus.com Cc: full-disclosure@...ts.grok.org.uk Subject: Security issue in Microsoft Outlook An issue has been discovered in MS Outlook (All Versions) where anyone can fake a URL & send it across. How does it work: Lets compose an email in MS Outlook, lets type http://www.cybertrion.com & put a space after it to make it a link. Now put your cursor just before cybertrion & type any URL for eg: http://www.foo-labs.info now send it to anyone. The receiver will see the URL as http://www.foo-labs.info but when he clicks on it it will directly take him to http://www.cybertrion.com I am not sure how critical this is but it can fool alot of people & result in download of a virus. For more details and Discovered by: Cybertrion Systems, http://www.cybertrion.com __________________________________ Do you Yahoo!? Yahoo! Mail - Find what you need with new enhanced search. http://info.mail.yahoo.com/mail_250
Powered by blists - more mailing lists