oss-sec mailing list archives
Re: A new class of security vulns?
From: Joshua Rogers <oss () internot info>
Date: Fri, 31 Jul 2015 03:01:22 +1000
On 31/07/15 01:33, Kurt Seifried wrote:
However now I'm seeing flaws around printing/display of user data, e.g. systems where a user can set their own name, but fills it with backspace characters, so when an admin looks at the text record it is mangled/shows something the attacker wants them to see and not the "True" data.
This seems vaguely related to the problem on many forums, where certain characters can be used to masquerade as others, such as using the Russian alphabet "Т", instead of the English "T". They look exactly the same, but are obviously treated differently. $ echo 'Т T' | sed -n l \320\242 T$ From a forum standpoint of what I've mentioned, the only 'exploitability' is through the use of impersonation. -- -- Joshua Rogers <https://internot.info/>
Attachment:
signature.asc
Description: OpenPGP digital signature
Current thread:
- A new class of security vulns? Kurt Seifried (Jul 30)
- Re: A new class of security vulns? Scott Arciszewski (Jul 30)
- Re: A new class of security vulns? cve-assign (Jul 30)
- Re: A new class of security vulns? Joshua Rogers (Jul 30)