'MetaCharacter'에 해당되는 글 2건

  1. 2008.11.27 Google Chrome MetaCharacter URI obfuscation vulnerability. by CEOinIRVINE
  2. 2008.11.26 Google Chrome MetaCharacter URI Obfuscation by CEOinIRVINE
POC Google Chrome MetaCharacter URI Obfuscation Vulnerability.

Google Chrome MetaCharacter URI Obfuscation Vulnerability.

(C) SecNiche Security / Proof of Concept

By:- Aditya K Sood.


This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage.

Check the Status Bar for Address Problem. Have a Look at the Source too.



The Indepth Concept of this Vulnerablility.

Look at POC.

Link1 : http://www.google.com%00@milw0rm.com

Link2 : http://www.google.com@yahoo.com

Link3 : ftp://anoymous:guest@microsoft.com

Check the Status Bar for Address Problem,


Specifcally Tested on 0.4.154.25 [Latest]


Other Version Tested:

Official Build 1798
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/525.13 (KHTML, like Gecko)
Chrome/0.2.149.29 Safari/525.13

Official Build 2200
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/525.13 (KHTML, like Gecko)
Chrome/0.2.149.30 Safari/525.13


Posted by CEOinIRVINE
l

 

If you use Google chrome version 0.2.149.27-30, please upgrade to the recent one.

Regards,

 

 

 

 

 

Google Chrome MetaCharacter URI Obfuscation Vulnerability

------------------------------------------------------------------------

 

 

SUMMARY

 

Google chrome is vulnerable to URI Obfuscation vulnerability. An attacker can easily perform malicious redirection by manipulating the browser functionality. The link can not be traversed properly in status address bar.This could facilitate the impersonation of legitimate web sites in order to steal sensitive information from unsuspecting users. The URI specified with @ character with or without NULL character causes the vulnerability.

 

DETAILS

 

Vulnerable Systems:

 * Chrome version 0.2.149.30

 * Chrome version 0.2.149.29

 * Chrome version 0.2.149.27

 

Proof of Concept:

Link1:  ftp://anoymous:guest@microsoft.com

Link2: [Without NULL] | http://www.google.com@yahoo.com | [Google --> Yahoo [Obfuscation]]

Link3: http://www.secniche.org%00@www.milw0rm.com [With NULL] SecNiche --> Milw0rm [Obfuscation]

 

 

 


Posted by CEOinIRVINE
l