[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [Full-disclosure] MIMESweeper For Web 5.X Cross Site Scripting
From:       "Erez Metula" <erezmetula () 2bsecure ! co ! il>
Date:       2006-07-09 15:06:26
Message-ID: C9B2DD4DEDB9214A84BB2937ACE45B6D1F42BA () server05 ! 2bsecure ! co ! il
[Download RAW message or body]

--===============1445776972==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C6A369.3FE6BA2F"

This is a multi-part message in MIME format.


 

MIMESweeper For Web 5.X Cross Site Scripting

 

 

I. INTRODUCTION

 

MIMESweeper For Web is a policy-based content security for web
applications. It analyzes web content and blocks pages or files that are
prohibited by the organizational security policy.

 

For more Information please refer to:

http://www.clearswift.com/products/msw/msw_web/default.aspx

 

 

II. DESCRIPTION

 

A XSS vulnerability was discovered by Erez Metula. When accessing a URL
which is not permitted the user is redirected to an "access denied" page
that is vulnerable to XSS. The page does not input validate / HTML
Encode the input and displays the data "as is".

 

Usually this means that it enables an attacker to inject HTML or
Javascript code into users's browsers, and by that bypassing the browser
DOM restrictions.

This javascript code can perform actions on behalf of the user, steal
authentication cookies, change the appearance of web pages, perform
phishing ,and generally can do everything to the original page.

 

 

III. EXPLOITATION

 

The vulnerability can be exploited by just redirecting the client to
some URL that is restricted by MIMESweeper policy and adding the script
at the end of the URL.

 

Example PoC:

http://SomeBlackListedSite/<script>PAYLOAD</script
<http://someblacklistedsite/%3cscript%3ePAYLOAD%3c/script> >

 

 

IV. IMPACT

 

Using the MIMESweeper capabilities of a central gateway to spread
malicious scripts to users.

An example attack scenario could be that an attacker will redirect many
users (by email, posting in the organization portal, etc.) to some
blocked URL and an accompanying script that will steal their
authentication cookies.

 

V. DETECTION

 

Detection of this vulnerability involves injecting some HTML tags /
scripts to a blocked URL that will be responded by the MIMESweeper with
the vulnerable page.

 

VI. WORKAROUND

 

Clearswift released a patch for this vulnerability, following the
initial contact &notification.

The patch can be obtained from:

http://www.clearswift.com/support/msw/patch_MswWeb.aspx

termed as "MIMEsweeper for Web 5.1.15 Hotfix"

 

 

VII. VENDOR RESPONSE

 

Clearswift has been informed on the 27/6/06 by e-mail to their support.

Clearswift released a fixed version of the software.

 

 

VIII. DISCLOSURE TIMELINE

 

27/06/06            Identification of the flaw

27/06/06            Reporting the flaw to clearswift by email

27/06/06            Response from clearswift, asking for more
description

27/06/06            Providing the full description to clearswift

28/06/06            Clearswift acknowledge of the vulnerability

06/07/06            Patch released by clearswift

09/07/06            Public advisory

 

 

IX. CREDITS

 

The vulnerability was discovered by Erez Metula.

 

Erez Metula, CISSP    
Application Security Department Manager

Security Software Engineer

E-Mail:  erezmetula@2bsecure.co.il <mailto:erezmetula@2bsecure.co.il> 

 

 

 


[Attachment #3 (text/html)]

<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns="http://www.w3.org/TR/REC-html40">

<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
 /* Style Definitions */
 p.MsoNormal, li.MsoNormal, div.MsoNormal
	{margin:0cm;
	margin-bottom:.0001pt;
	text-align:right;
	direction:rtl;
	unicode-bidi:embed;
	font-size:12.0pt;
	font-family:"Times New Roman";}
a:link, span.MsoHyperlink
	{color:blue;
	text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
	{color:purple;
	text-decoration:underline;}
span.EmailStyle17
	{mso-style-type:personal-compose;
	font-family:Arial;
	color:windowtext;}
@page Section1
	{size:595.3pt 841.9pt;
	margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
	{page:Section1;}
-->
</style>

</head>

<body lang=EN-US link=blue vlink=purple>

<div class=Section1 dir=RTL>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>MIMESweeper For Web 5.X Cross Site
Scripting<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>I. \
INTRODUCTION<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>MIMESweeper For Web is a policy-based
content security for web applications. It analyzes web content and blocks pages
or files that are prohibited by the organizational security \
policy.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>For more Information please refer \
to:<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><a
href="http://www.clearswift.com/products/msw/msw_web/default.aspx">http://www.clearswift.com/products/msw/msw_web/default.aspx</a><o:p></o:p></span></font></p>


<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>II. \
DESCRIPTION<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>A XSS vulnerability was discovered
by Erez Metula. When accessing a URL which is not permitted the user is
redirected to an &quot;access denied&quot; page that is vulnerable to XSS. The page
does not input validate / HTML Encode the input and displays the data &quot;as
is&quot;.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'>Usually this means that it enables an \
attacker to inject HTML or Javascript code into users's browsers, and by that \
bypassing the browser DOM restrictions.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>This
javascript code can perform actions on behalf of the user, steal authentication
cookies, change the appearance of web pages, perform phishing ,and generally
can do everything to the original page.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>&nbsp;<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>III. \
EXPLOITATION<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>The
vulnerability can be exploited by just redirecting the client to some URL that
is restricted by MIMESweeper policy and adding the script at the end of the
URL.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'>Example PoC:<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><a
href="http://someblacklistedsite/%3cscript%3ePAYLOAD%3c/script">http://SomeBlackListedSite/&lt;script&gt;PAYLOAD&lt;/script</a>&gt;<o:p></o:p></span></font></p>


<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='margin-left:36.0pt;text-align:left;
direction:ltr;unicode-bidi:embed'><font size=3 face="Times New Roman"><span
style='font-size:12.0pt'>&nbsp;</span></font><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>IV. IMPACT<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Using the MIMESweeper capabilities
of a central gateway to spread malicious scripts to \
users.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>An example attack scenario could be
that an attacker will redirect many users (by email, posting in the
organization portal, etc.) to some blocked URL and an accompanying script that
will steal their authentication cookies.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>V. DETECTION<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Detection of this vulnerability involves
injecting some HTML tags / scripts to a blocked URL that will be responded by
the MIMESweeper with the vulnerable page.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>VI. \
WORKAROUND<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Clearswift released a patch for this
vulnerability, following the initial contact \
&amp;notification.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>The patch can be obtained \
from:<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><a
href="http://www.clearswift.com/support/msw/patch_MswWeb.aspx">http://www.clearswift.com/support/msw/patch_MswWeb.aspx</a><o:p></o:p></span></font></p>


<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>termed as &quot;<b><span
style='font-weight:bold'>MIMEsweeper for Web 5.1.15 \
Hotfix</span>&quot;</span></b><o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>VII. VENDOR \
RESPONSE<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Clearswift has been informed on the \
27/6/06 by e-mail to their support.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Clearswift released a fixed version
of the software.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span lang=PT-BR
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>VIII. DISCLOSURE \
TIMELINE<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>27/06/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Identification of the \
flaw<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>27/06/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Reporting the flaw to \
clearswift by email<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>27/06/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Response from \
clearswift, asking for more description<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>27/06/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Providing the full \
description to clearswift<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>28/06/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Clearswift acknowledge \
of the vulnerability<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;line-height:150%;text-autospace:
none;direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;line-height:150%;font-family:Arial'>06/07/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Patch released by \
clearswift<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>09/07/06 \
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Public \
advisory<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>IX. CREDITS<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>The vulnerability was discovered by Erez
Metula.<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;text-autospace:none;
direction:ltr;unicode-bidi:embed'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'>Erez
Metula, CISSP&nbsp;&nbsp;&nbsp; <br>
Application Security Department Manager<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'>Security&nbsp;Software \
Engineer<o:p></o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span lang=PT-BR style='font-size:10.0pt;
font-family:Arial'>E-Mail:&nbsp;</span></font><font size=2 face=Arial><span
lang=PT-BR style='font-size:10.0pt;font-family:Arial'> </span></font><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><a
href="mailto:erezmetula@2bsecure.co.il"><font color=black><span
style='color:windowtext;text-decoration:none'>erezmetula@2bsecure.co.il</span></font></a><o:p></o:p></span></font></p>


<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span lang=PT-BR style='font-size:10.0pt;
font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=LTR style='text-align:left;direction:ltr;unicode-bidi:
embed'><font size=2 face=Arial><span \
style='font-size:10.0pt;font-family:Arial'><o:p>&nbsp;</o:p></span></font></p>

<p class=MsoNormal dir=RTL><font size=3 face="Times New Roman"><span lang=HE
style='font-size:12.0pt'><o:p>&nbsp;</o:p></span></font></p>

</div>

</body>

</html>



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
--===============1445776972==--


[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic