NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home / News / Security / Incidents

Incidents


Netscape.com Hacked via XSS Attacks

Hackers are most likely fans of the rival Digg.com

By Marius Oiaga, Technology News Editor

27th of July 2006, 10:41 GMT

Adjust text size:


On July 26, 2006, Netscape.com was the victim of an ongoing online spat it has with rival Digg.com. Fans of the later online news service have taken critical measures in order to shift the balance in favor of Digg.com and have hacked Netscapes' Website. The attack was performed via Cross Site Scripting (XSS) vulnerability. This allowed the attackers to place humorous messages of Netscape.com reading: "This site sucks" or "Hi to all you Diggers out there" while redirecting traffic to Digg.com. The hackers inserted JavaScript code snippets into all the pages of Netscape, including the homepage. The
possibility that the attack was used to inject malicious code has not been confirmed.

The Netscape.com hack was discovered by researchers at F-Secure, but the security company has not made public any updates concerning the matter and the identities of the hackers remain unknown. "Attackers have used the XSS vulnerability to inject their own JavaScript code snippets into pages on the website, including the homepage," said a note posted by F-Secure anti-phishing researcher S.G Masood. "Fortunately no one has tried to inject malicious code, yet."

America Online representatives have explained that the exploit was possible because of improper filtering of story submission from users. As a result some of the submissions containing the cross-site scripting exploit managed to get passed Netscape.com defenses allowing for the incident to unfold. Critics of Netscape have accused the social news site of copying Digg.com, since it has launched its services in June 2006.
Read by 1,138 user(s) | Add comment | Link to this article TWEET THIS


Article rating:
Good (3.4/5) 5 vote(s)    

Subscribe to news | Print article | Send to friend

© Copyright 2001-2009 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


Google Joins Microsoft

Intranets Vunerable to JavaScript Malware

Acunetix-based Web Security Solutions

WatchGuard Launches Firebox X Edge Appliances

Exploits Surface for 2 Windows Vulnerabilities

Panda Antivirus 2007 Beta

Cyber Terrorism Increases Security Spendings

User opinions:

No user comments yet.
Be the first to express your opinion using the form below!

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 




Windows tabGames tabDrivers tabMac tabLinux tabScripts tabMobile tabHandheld tabGadgets tabNews tab

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM