Full Disclosure mailing list archives
Yahoo/Geocities possible exploit/vulnerability
From: "Jain, Siddhartha" <Siddhartha.Jain () kla-tencor com>
Date: Mon, 14 Aug 2006 17:02:22 -0700
Hi, I was logged onto Yahoo Messenger (version 7.5 on WinXP SP2 Pro), when I got a message from a friend's ID: Pxxxx Bxxxxx (8/14/2006 4:25:50 PM): ---> www.geocities.com/now_thats_funny_210/ Clicking on the link took me to a page with the URL as above in the address bar and yahoo/geocities page that asks for username and password. On entering the username and password, the next page displayed was my photo album on yahoo but the URL in the address bar still remained the same as above!! Next thing I noticed that Yahoo Messenger had frozen. I changed my yahoo password and un-installed Yahoo Messenger. When I asked my friend about the message, he said he didn't send the message but received a similar message from his wife in the morning who hadn't sent it either. - Siddhartha _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.grok.org.uk/full-disclosure-charter.html Hosted and sponsored by Secunia - http://secunia.com/
Current thread:
- Yahoo/Geocities possible exploit/vulnerability Jain, Siddhartha (Aug 14)
- Re: Yahoo/Geocities possible exploit/vulnerability Nick FitzGerald (Aug 14)
- <Possible follow-ups>
- RE: Yahoo/Geocities possible exploit/vulnerability Jain, Siddhartha (Aug 14)
- Re: Yahoo/Geocities possible exploit/vulnerability Schanulleke (Aug 14)
- RE: Yahoo/Geocities possible exploit/vulnerability Nick FitzGerald (Aug 15)
- Re: Yahoo/Geocities possible exploit/vulnerability crazy frog crazy frog (Aug 15)