1997-06-13 - Re: Netscape Bug :)))

Header Data

From: Martin Minow <minow@apple.com>
To: ichudov@Algebra.COM (Igor Chudov @ home)
Message Hash: c670b0af77d92a00ff2d240e328ff687606067d3b8a4106d78ce6da8280baf4d
Message ID: <v03102800afc67e17aff6@[17.219.102.76]>
Reply To: <199706130333.WAA05305@mailhub.amaranth.com>
UTC Datetime: 1997-06-13 05:02:15 UTC
Raw Date: Fri, 13 Jun 1997 13:02:15 +0800

Raw message

From: Martin Minow <minow@apple.com>
Date: Fri, 13 Jun 1997 13:02:15 +0800
To: ichudov@Algebra.COM (Igor Chudov @ home)
Subject: Re: Netscape Bug :)))
In-Reply-To: <199706130333.WAA05305@mailhub.amaranth.com>
Message-ID: <v03102800afc67e17aff6@[17.219.102.76]>
MIME-Version: 1.0
Content-Type: text/plain



>William H. Geiger III wrote:
>> Seems that there is a bug in Netscape including the new Communicator that
>> will allow a web site to read *ANY* file on your computer. I repeate
>> *ANY*, yes Virginia, *ANY* file on your computer.
>
>And what is the exploit?
>

According to an uninformitive, but extensive, report on CNN, the firm
is being very closed-mouth about the bug, and expects to be richly
rewarded "The $1000 bug reward was an insult." They will, however,
*give* the information to Netscape if they appear in person at the
company offices in Aarhus.

You might want to look at PC Lab's web site (or PC Magazine, I don't
remember which). All of the examples appeared to use Windows, and
the words "Active X" and "Java" were not used.

Martin Minow







Thread