[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Pine 4.33 (at least) URL handler allows embedded commands.

To: zen-parse <zen-parse@xxxxxxx>
Subject: Re: Pine 4.33 (at least) URL handler allows embedded commands.
From: Michal Zalewski <lcamtuf@xxxxxxxxxxx>
Date: Sun, 6 Jan 2002 17:37:43 -0500 (EST)
Cc: bugtraq@xxxxxxxxxxxxxxxxx
In-reply-to: <Pine.LNX.4.33.0201051514170.25654-100000@xxxxxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

On Sat, 5 Jan 2002, zen-parse wrote:

> Problem:		URL handler allows embedded commands.
> 			May allow email viruses of the Outlook kind.

>   http://address/'&/some/program${IFS}with${IFS}arguments&'

Isn't that old news? http://www.securityfocus.com/bid/810

I *can* be wrong, but it looks like it is the same problem...

-- 
_____________________________________________________
Michal Zalewski [lcamtuf@xxxxxxxxxxxxxxxx] [security]
[http://lcamtuf.coredump.cx] <=-=> bash$ :(){ :|:&};:
=-=> Did you know that clones never use mirrors? <=-=
          http://lcamtuf.coredump.cx/photo/

Follow-Ups:
- Re: Pine 4.33 (at least) URL handler allows embedded commands.
  - From: zen-parse
- Re: Pine 4.33 (at least) URL handler allows embedded commands.
  - From: Roman Drahtmueller

References:
- Pine 4.33 (at least) URL handler allows embedded commands.
  - From: zen-parse

Prev by Date: CrossSiteScripting PostNuke.
Next by Date: Denial of Service flaw in Apache
Previous by thread: Pine 4.33 (at least) URL handler allows embedded commands.
Next by thread: Re: Pine 4.33 (at least) URL handler allows embedded commands.
Index(es):
- Date
- Thread

This mailing list archive is a service of Copilotco.