Fwd: Security warning: Netscape 4.0x https & Squid 1.2beta proxy

From: Fred Donck (f.c.w.donckat_private)
Date: Mon Jul 20 1998 - 12:37:21 PDT

Next message: TTSG: "N-Base Vulnerability Advisory"

Previous message: Greg Alexander: "Re: New Java Security Flaw Found"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This is a multi-part message in MIME format.
--------------E5DDC0B8E9C6864BE87CCF5E
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

All,

See attached from the squid-users mailing-list


-- Fred
--------------E5DDC0B8E9C6864BE87CCF5E
Content-Type: message/rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Received: from ksopenml.ksepl.shell.nl by swwrij.ksepl.shell.nl (8.8.7/8.8.7-Fred.Donck/EPT-IS) id RAA16224; Mon, 20 Jul 1998 17:11:18 +0200 (MET DST)
Received: from shell.nl by ksopenml.ksepl.shell.nl with ESMTP
        (1.40.112.12/16.2) id AA152267477; Mon, 20 Jul 1998 17:11:17 +0200
Received: by shell.nl; id RAA05696; Mon, 20 Jul 1998 17:11:16 +0200 (METDST)
Received: from ack.ucar.edu(192.52.106.29) by charon-1.shell.nl via smap (3.2)
        id xma005585; Mon, 20 Jul 98 17:10:41 +0200
Received: (from slist@localhost)
        by ircache.net (8.8.6/8.8.6) id IAA02926
        for fredat_private; Mon, 20 Jul 1998 08:10:40 -0700 (PDT)
Resent-Date: Mon, 20 Jul 1998 08:10:40 -0700 (PDT)
Date: Mon, 20 Jul 1998 10:09:38 -0500
Message-Id: <199807201509.KAA26183at_private>
From: Joe Ramey <rameyat_private>
To: hnoat_private
Cc: squid-usersat_private
In-Reply-To: <35AFCEB9.9E4500Aat_private> (message from Henrik Nordstrom
        on Sat, 18 Jul 1998 00:22:49 +0200)
Subject: Re: Security warning: Netscape 4.0x https & Squid 1.2beta proxy
Reply-To: rameyat_private
References:  <35AFCEB9.9E4500Aat_private>
Resent-Message-Id: <"807OuD.A.5j.Z31s1"@ack.ircache.net>
Resent-From: squid-usersat_private
X-Mailing-List: <squid-usersat_private> archive/latest/852
X-Loop: squid-usersat_private
Precedence: list
Resent-Sender: squid-users-requestat_private
X-Mozilla-Status2: 00000000

   Date: Sat, 18 Jul 1998 00:22:49 +0200
   Content-Type: text/plain; charset=iso-8859-1
   From: Henrik Nordstrom <hnoat_private>
   Sender: hnoat_private
   X-MIME-Autoconverted: from quoted-printable to 8bit by ircache.net id PAA06782
   Resent-From: squid-usersat_private
   X-Mailing-List: <squid-usersat_private> archive/latest/793
   X-Loop: squid-usersat_private
   Precedence: list
   Resent-Sender: squid-users-requestat_private

   If you are using Squid 1.2beta and Netscape 4.x then you MUST use
   different server names for your HTTP and Security (SSL) proxy. This
   is due to a bug in Netscape4.0x that may cause https requests to be
   sent in plain text to a Squid 1.2beta proxy server.

FWIW, this bug is still present in the latest Netscape beta, 4.5 PR1.
I reported this bug to them several months ago.  Guess it's time to
report it again.

Joe


--------------E5DDC0B8E9C6864BE87CCF5E--

Next message: TTSG: "N-Base Vulnerability Advisory"
Previous message: Greg Alexander: "Re: New Java Security Flaw Found"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 14:06:06 PDT