Full Disclosure mailing list archives
Re: The Misfortune Cookie Vulnerability
From: Sandro Gauci <sandro () enablesecurity com>
Date: Fri, 19 Dec 2014 07:57:26 +0000
The most technical it seems to get is the following: <quote> The Misfortune Cookie vulnerability is exploitable due to an error within the HTTP cookie management mechanism present in the affected software, allowing an attacker to determine the ‘fortune’ of a request by manipulating cookies. Attackers can send specially crafted HTTP cookies that exploit the vulnerability to corrupt memory and alter the application state. This, in effect, can trick the attacked web server to treat the current session with administrative privileges. </quote> From http://mis.fortunecook.ie/misfortune-cookie-tr069-protection-whitepaper.pdf. Would be very useful for the rest of us if this information were less of an advert and more technical. Shahar, are there plans to release proper technical details? Sandro Gauci Penetration tester and security researcher Email: sandro () enablesecurity com Web: http://enablesecurity.com/ PGP: 8028 D017 2207 1786 6403 CD45 2B02 CBFE 9549 3C0C On Fri, Dec 19, 2014 at 6:56 AM, Michal Zalewski <lcamtuf () coredump cx> wrote:
See http://mis.fortunecook.ie for the rest.I think you might have accidentally pasted the wrong link. This one doesn't seem to contain additional information. Cheers, /mz _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
_______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- The Misfortune Cookie Vulnerability Shahar Tal (Dec 18)
- Re: The Misfortune Cookie Vulnerability Michal Zalewski (Dec 18)
- Re: The Misfortune Cookie Vulnerability Sandro Gauci (Dec 22)
- Re: The Misfortune Cookie Vulnerability Shahar Tal (Dec 22)
- Re: The Misfortune Cookie Vulnerability Shahar Tal (Dec 22)
- Re: The Misfortune Cookie Vulnerability Jon Hart (Dec 23)
- Re: The Misfortune Cookie Vulnerability Sandro Gauci (Dec 22)
- Re: The Misfortune Cookie Vulnerability Gynvael Coldwind (Dec 22)
- Re: The Misfortune Cookie Vulnerability Michal Zalewski (Dec 18)