Full Disclosure mailing list archives
Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities
From: "Rob Thompson" <my.security.lists () gmail com>
Date: Mon, 4 Feb 2008 13:10:55 -0800
I only see that FF is current to version 2.0.0.11. Are you sure that you are finding this in 2.0.0.12? If so, where are you getting this version from? On Feb 4, 2008 12:10 PM, carl hardwick <hardwick.carl () gmail com> wrote:
Firefox seems to have trouble with defining the proper hostname when requesting a ssl connection. I was able to trick Firefox in thinking the hostname behind the at-sign is legit and the same as the URI that requested an ssl connection, and this without a warning. PoC: https://www.gmail.com%C0%AF%C0%AF%C0%C0%80 () roguehost com You can add as much garbage between .com and the @ sign. So what else can we do? PoC: www.cnn.com%C0%AF%C0%AF%C0%C0%80@google www.gmail.com%C0%AF%C0%AF%C0%C0%80@hotmail ah heck we don't need that at all: www.gmail.comxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@hotmail works fine also :) _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
-- Rob _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities carl hardwick (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities Rob Thompson (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities steve menard (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities Larry Seltzer (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities scott (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities reepex (Feb 04)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities coderman (Feb 06)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities coderman (Feb 06)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities coderman (Feb 06)
- Re: Firefox 2.0.0.12 SSL Spoofing and Domain Guessing vulnerabilities coderman (Feb 06)