Netscape Navigator Directory Cross-Domain Scripting Vulnerability

Bugtraq ID:	7456
Class:	Origin Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 29 2003 12:00AM
Updated:	Apr 29 2003 12:00AM
Credit:	Discovery of this vulnerability is credited to Liu Die Yu <[email protected]>.
Vulnerable:	Netscape Navigator 7.0.2
Not Vulnerable:

Netscape Navigator Directory Cross-Domain Scripting Vulnerability

A vulnerability has been reported that could allow an attacker to fool Netscape into running script in a foreign domain. If a dot (.) is appended to the end of the hostname in a URI, Netscape may accept the directory name as the actual domain. This could be exploited to run malicious script code in a foreign domain.

Netscape Navigator Directory Cross-Domain Scripting Vulnerability

A proof-of-concept is available at the following location:

http://liudieyuinchina.vip.sina.com/DomainDot/DomainDot-MyPage.htm

Netscape Navigator Directory Cross-Domain Scripting Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Netscape Navigator Directory Cross-Domain Scripting Vulnerability

References:

• Netscape Homepage (Netscape)
  
• "netscape navigator" is cracked. (Liu Die Yu )