full-disclosure - Re: FIREFOX 2.0.0.5 new vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <997ef2c20707250545l392cf42ey9535f5ba4c35ee20@mail.gmail.com>
Date: Wed, 25 Jul 2007 08:45:28 -0400
From: "Nate McFeters" <nate.mcfeters@...il.com>
To: "Mesut EREN" <meren@...akkiremit.com.tr>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: FIREFOX 2.0.0.5 new vulnerability

Check out our blog on xs-sniper.com.  There's more info there.  This
flaw does somewhat depend upon what you have installed, as is
referenced on our blog page.  Keep in mind that the URI's are tied to
commands thru the registry, and that those commands are where the
command injections go.  If you have a different command from what we
have, then of course there's the chance it doesn't work.

Thanks,

Nate

On 7/25/07, Mesut EREN <meren@...akkiremit.com.tr> wrote:
>
>
>
> Hi all,
>
> FF 2.0.0.5 new remote code Execution vulnerability, I tested FF 2.0.0.5. But
> don't work is code.
>
> Example code is
>
> mailto:%00%00../../../../../../windows/system32/cmd".exe
> ../../../../../../../../windows/system32/calc.exe " - "
> blah.bat
>
> nntp:%00%00../../../../../../windows/system32/cmd".exe
> ../../../../../../../../windows/system32/calc.exe " - "
> blah.bat
>
> Where i missing?
>
>
>
> Mesut EREN
>  BAŞAK ÇATI & CEPHE SİSTEMLERİ
>  Bilgi İşlem Sorumlusu
>
> MCSA:S,MCSE:S,CEH,CCNA
>
> meren@...akkiremit.com.tr
>
>
>
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter:
> http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/