full-disclosure - nVidia.com [Url Redirection flaw]

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <545c35ac0903240713l54cf89bbhdc6aca376f4b0e62@mail.gmail.com>
Date: Tue, 24 Mar 2009 15:13:21 +0100
From: Lorenzo Vogelsang <vogelsang.lorenzo@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: nVidia.com [Url Redirection flaw]

Hi all, i'm new to the list. I'm an italian student who likes security
topics in the I.C.T world..

Browsing the nVdia web sites, i have found a very basic Url redirection
flaw. Infact when downloading a driver i get Urls like this:

http://www.nvidia.com/content/DriverDownload/download_confirmation.asp?kw=&url=http://us.download.nvidia.com/Windows/179.48/179.48_notebook_winxp_64bit_beta.exe

and connecting to this another Url

http://www.nvidia.com/content/DriverDownload/download_confirmation.asp?kw=&url=http://www.google.it

will redirects succefully to www.google.it! (or other web site of your
choice , or downloadble content..)

Enjoy!

Lorenzo Vogelsang.

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/