MSN messenger security hole

[the_JinX]

hey all.

I read this on tweakers.net (a dutch hardware/software website)
and it does work..
http://raburton.members.easyspace.com/msn/
a website can read your msn info and via a cookie send it to the abuser...

dutch readers go here; http://www.tweakers.net/nieuws/20444

[jcdux]

Yeah, I saw a report on theregister (http://theregister.co.uk/content/4/23936.html) yesterday.

Same prob I think.

J.

[jodosha]

Original Announcement:
http://securityfocus.com/archive/1/254021

Here is an example of vulnerability:
http://raburton.members.easyspace.com/msn/

[jodosha]

My excuse I had read whitout lull JinX's post and I had cited an url which was writed already.

[the_JinX]

np jodosha..

thanks for the other link anyway...

[RiOtEr]

http://tom.me.uk/msn/demo.html just another example of that hole if u want it