[Full-Disclosure] Re: Openware.org IE Fix - Warning

[Aaron Horst <anthrax101@yahoo.com>]

Not only does it have memory leaks and buffer
overflows, it contains an XSS flaw.

<a
href="http://www.openwares.org/cgi-bin/exploit.cgi?www.example.com</a><script>alert(unescape("This%20is%20cross%20site%20scripted!"))</script>">http://www.openwares.org/cgi-bin/exploit.cgi?www.example.com</a><script>alert(unescape("This%20is%20cross%20site%20scripted!"))</script></a>

Honestly, how can anyone who issues a security patch
have such enormous gaping holes in it. I think even
Microsoft could do better then this one. This takes a
relatively minor bug, and turns it into a wide open
security failure.

Their site does use cookies to track a session ID,
which could lead to a compromise of user accounts when
combined with a javascript XSS.

admin@openwares.org notified.

Aaron Horst


=====
"A bug. Every system has a bug. The more complex the system, the more bugs. 
Transactions circling the earth, passing through the computer systems of tens 
or hundreds of corporate entities, thousands of network switches, millions of 
lines of code, trillions of integrated? circuit logic gates. Somewhere there is 
a fault. Sometime the fault will be activated. Now or next year, sooner or 
later, by design, by hack, or by onslaught of complexity. It doesn?t matter. 
One day someone will install ten new lines of assembler code, and it will all 
come down. " -- Ellen Ullman

__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html