-----BEGIN PGP SIGNED MESSAGE----- In <199706130347.WAA08219@manifold.algebra.com>, on 06/12/97 at 10:47 PM, ichudov@Algebra.COM (Igor Chudov @ home) said:
William H. Geiger III wrote:
Seems that there is a bug in Netscape including the new Communicator that will allow a web site to read *ANY* file on your computer. I repeate *ANY*, yes Virginia, *ANY* file on your computer.
WebEx user and loving it. :)))))
Do you know if the bug affects Unix versions? How about linux?
And what is the exploit?
They didn't go into details but they did say in the report that it was a bug in the "core" of the Netscape code so I would imagine that it is cross platform. Unfortunatly they did give details on how to use this bug. This seems to be a bug that has been out for awhile as it is not just the new Communicator but older versions of NS also. Perhaps time to generate a new PGP key pair? :( - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM6DFQ49Co1n+aLhhAQF8WAQAu5mdShPAlsCQUSQjb2tMtMwQD/o7KFhy hxZB2mv3dMZmdNzZxpspQslO3V11teL3aeN9lE+5NIHJtV3mO6Zhq8ScOo6nQb6L 1EC47wroVGB3H7FeIf8Ol6xfzu1fZf6KawvIrPu83rbte8RQ50KE+Q09CB8wMS69 U06XJWyktLc= =QEUX -----END PGP SIGNATURE-----