EUVD-2007-0707

Malware in sbrugna...

Apple iChat 3.1.6 441 - aim: URL Handler Format String (PoC)

Apple iChat 3.1.6 441 - aim: URL Handler Format String PoC MOAB-20-01-2007 function boom var str = ''; for var i = 0; i milw0rm.com 2007-01-21...

ichat3.txt

Date: Wed, 9 Sep 1998 16:19:28 -0700 From: Jon Beaton Subject: bug in iChat 3.0 maybe others Hi, The iChat http://www.ichat.com/ ROOMS server runs as 'nobody', and on port 4080 as default. From what I've noticed, it just uses http, and has a bug which lets following /../../../ be ran on the URL...