Re: Bofra/IFrame Exploits on More Web Sites

Article View: be.comp.security

Article #785

#785

From: FluffyB
Date: Mon, 22 Nov 2004 15:53

20 lines
1656 bytes

"Filbert" <filb@spam.la> schreef in bericht 
news:1456890.jBi8I4zSqs@127.0.0.1...
> The Storm Center received a report this morning of a high 
> profile UK website
> that contains a pointer on their main page to another URL 
> hosting the
> Bofra/IFrame exploit. We have confirmed that if this site 
> is visited using
> Internet Explorer the exploit will be downloaded. The site 
> owners have been
> notified.
>
> http://isc.sans.org/diary.php?date=2004-11-20
>
>

The Register :

http://www.theregister.co.uk/2004/11/21/register_adserver_attack/

Technical Details

Message-ID: <yXnod.32181$Yy1.1291363@phobos.telenet-ops.be>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!newsfeed.icl.net!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!easynews.net!easynet-isham!easynet.net!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail

References: <1456890.jBi8I4zSqs@127.0.0.1>

Show Full Headers

Complete Article Headers

X-Google-Thread: 113446,10b2d828c15bd8b2
X-Google-Attributes: gid113446,public
X-Google-Language: ENGLISH,ASCII-7-bit
Path: arc1-ca.pugleaf.net!g2news1.google.com!news2.google.com!proxad.net!newsfeed.icl.net!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!easynews.net!easynet-isham!easynet.net!feed1.news.be.easynet.net!ossa.telenet-ops.be!phobos.telenet-ops.be.POSTED!not-for-mail
From: "FluffyB" <fb@yahoo.com>
Newsgroups: be.comp.security
References: <1456890.jBi8I4zSqs@127.0.0.1>
Subject: Re: Bofra/IFrame Exploits on More Web Sites
Lines: 23
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-RFC2646: Format=Flowed; Original
Message-ID: <yXnod.32181$Yy1.1291363@phobos.telenet-ops.be>
Date: Mon, 22 Nov 2004 15:53:02 GMT
NNTP-Posting-Host: 81.82.121.96
X-Complaints-To: abuse@telenet.be
X-Trace: phobos.telenet-ops.be 1101138782 81.82.121.96 (Mon, 22 Nov 2004 16:53:02 MET)
NNTP-Posting-Date: Mon, 22 Nov 2004 16:53:02 MET
Organization: Telenet Internet

Reply to Parent Message