[Full-Disclosure] .MAC Webmail phishing attack

[rabbit food <r4bb1t_f00d@xxxxxxxxxxx>]

--
Information 
--

It may be possible to redirect a naive .Mac webmail
user, to another site, possibly, one mocked up as
webmail (a user may ignore the fact SSL is not
present).

http://webmail.mac.com/redirect/http://your url

Using unicode representations of the word redirect,
may aid an attacker through "obscuring",
the word - redirect-.

http://webmail.mac.com/%72%65%64%69%72%65%63%74/http://aURLofchoice/

--




        
        


        
        
                
___________________________________________________________
Yahoo! Messenger - Communicate instantly..."Ping" 
your friends today! Download Messenger Now 
http://uk.messenger.yahoo.com/download/index.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html