full-disclosure - Advisory : Redirection And Phishing Vulnerability In AOL My.ScreeName.com

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <456D430F.9070509@metaeye.org>
Date: Wed, 29 Nov 2006 13:51:35 +0530
From: Aditya Sood <zeroknock@...aeye.org>
To: Full Disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Advisory : Redirection And Phishing Vulnerability
	In AOL My.ScreeName.com


Advisory : Severe Phishing And Redirection Attacks In AOL ScreenName Website
By : Zeroknock [at] Metaeye.Org

Dated : 23 November 2006
Severity : Critical

Explanation :
The screenname AOL website is subjected to phishing attacks as the
redirection
is possible with manipulation in URL.This flaw occur in the way when
ever user
registered to the screenname website with login page specified as:

URL : my.screenname.aol.com/_cqr/login/aimPrelogin.psp?

After the successfull login with the desired username and password , the
traffic is
redirected to the destination The attacker exploit the URL parameters by
redirecting as :

my.screenname.aol.com/_cqr/login/aimPrelogin.psp?siteState=redirect@<Website
Name>

Example :
my.screenname.aol.com/_cqr/login/aimPrelogin.psp?siteState=redirect@http://www.slashdot.org

The whole site with this URL paradigm is vulnerable to these attacks.

Vendor Status : Reported.Patched.
                         The security parameters are changed.




Aditya K Sood
Handle : Zeroknock
http://zeroknock.metaeye.org

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/