[VIM] site redirects: vulnerability or no?
security curmudgeon
jericho at attrition.org
Sun Nov 13 07:16:16 EST 2005
Sullo and I have been debating this casually, and the only thing that
hasn't forced our decision is the reports aren't too frequent (yet?).
A site or product offers a script to redirect you to another site. They
are typically found as part of leaving a site in some fashion. Example:
http://[target]/goodbye.php?http://arbitrary.moo/
If you obscure the 'arbitrary.moo' by using encoding, IP address, TinyURL
or a number of other methods, you have what looks like a legitimate link
to a site that many people may click on w/o realizing it. This is very
handy and likely widely abused in phishing attacks, which is the reason
some people are disclosing them.
But, is it a *vulnerability*?
If it is, do you see your database assigning a unique ID to each product
that does this (easily hundreds)? Or a sort of generic entry covering the
concept? Or none at all?
More information about the VIM
mailing list