OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Subject: Re: Malicious-HTML vulnerabilities at deja.com
From: Dan Harkless (dan-bugtraqDILVISH.SPEED.NET)
Date: Mon Mar 20 2000 - 14:16:25 CST

Geert Altena <geertuttnarag.tn.utwente.nl> writes:
> > http://www.deja.com/getdoc.xp?AN=591804116
>
> Comes out as (copy/paste from netscape):
> ------------
> >> Forum: alt.test
> >> Thread: </title><script
> >> src="http://www.in-design.com/~nsmart/foo.js"></script><body
> >> onLoad="return bar()">
> >> Message 1 of 1
>
> Subject: </title><script src="http://www.in-design.com/~nsmart/foo.js">
> </script><body onLoad="return bar()">
> Date: 03/01/2000
> Author: regkey <regkeyyahoo.com>
> --------------
>
> I have javascript enabled, no popup.

Perhaps they fixed the default viewing format, but they didn't fix the "Deja
Classic" interface, which is what I use (as I can't stand the new design).

Try:

    http://www.deja.com/=dnc/getdoc.xp?AN=591804116

At least with Netscape Communicator 4.7 (on NT) that definitely makes a
popup.

Didn't try the redirection one:

> > Redirection using meta tag:
> >
> > http://www.deja.com/getdoc.xp?AN=591833344

but I suspect the same is true there.

----------------------------------------------------------------------
Dan Harkless | To prevent SPAM contamination, please
dan-bugtraqdilvish.speed.net | do not mention this private email
SpeedGate Communications, Inc. | address in Usenet posts. Thank you.