full-disclosure - Sensitive Information Disclosure Vulnerability in Kinetics Kiosk Product

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <301356f5050818092957087dba@mail.gmail.com>
Date: Thu Aug 18 17:29:09 2005
From: wintrmte at gmail.com (Sam Evans)
Subject: Sensitive Information Disclosure Vulnerability
	in Kinetics Kiosk Product

Jason,

Not that I disagree with you here, but I am not sure I understand why you 
think that connecting to a host outside the private address ranges is 
irresponsible by the company?

The connectivity from this Kiosk to the destination displayed could be one 
of:

The destination host only allows point to point connectivity, controlled by 
a firewall or that the connectivity from this Kiosk is through a VPN 
connection.

I also don't see the difference of using Internet Explorer versus any other 
browser. Script errors are script errors and will be displayed regardless 
which browser they use unless specifically disabled (as you mentioned).





On 8/18/05, Jason Coombs <jasonc@...ence.org> wrote:
> 
> The following script error message was noted being displayed this morning 
> on an airline check-in kiosk manufactured by Kinetics USA.
> 
> Vendor: Kinetics USA
> www.kineticsUSA.com <http://www.kineticsUSA.com>
> 
> 
> Line: 107
> Char: 2
> Error: object expected
> Code: 0
> URL: http://151.151.10.46:64080/attract
> ?time=1124376480&TransactionID=HNL_KIOSK09-050818044716
> 
> Clearly, building a product such as a publicly-accessible airline 
> passenger check-in kiosk using Internet Explorer and Windows is a very bad 
> design decision if you care at all about preventing this sort of information 
> disclosure.
> 
> Even so, IE can and should be configured so as not to display such script 
> errors.
> 
> Furthermore, the use of an IP address that is outside of the RFC 1918 
> private subnet address range appears very irresponsible.
> 
> Sincerely,
> 
> Jason Coombs
> jasonc@...ence.org
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20050818/faeb33e6/attachment.html