Re: Information Leak Bug in Netscape Mail

From: Stephen Cope (mail-e-9657c50c5a36fd34d2at_private)
Date: Fri Nov 23 2001 - 17:58:02 PST

Next message: Markus Kern: "Internet Explorer allows reading of local files by remote webpages"

Previous message: Ron DuFresne: "Re: [NetGuard Security] NSI Rwhoisd another Remote Format String Vulnerability"
In reply to: Scott Dier: "Re: Information Leak Bug in Netscape Mail"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Scott Dier wrote:
: I believe this was reported to Mozilla's bugzilla eons ago and Is *not*
: leaking information (tested with 0.9.5)

http://bugzilla.mozilla.org/show_bug.cgi?id=83038

It was fixed around 0.9.2 which was several months ago. Debian stable
still ships M18, so that is vulnerable. 0.9.6 was released a few days 
ago.

Somewhere in the awful rambling by "GOBBLES" it mentioned they liked to
use Netscape 4, which was what they were complaining about. Clearer
English and less rambling would have helped a lot.

-- 
Stephen Cope - http://sdc.org.nz/

application/pgp-signature attachment: stored

Next message: Markus Kern: "Internet Explorer allows reading of local files by remote webpages"
Previous message: Ron DuFresne: "Re: [NetGuard Security] NSI Rwhoisd another Remote Format String Vulnerability"
In reply to: Scott Dier: "Re: Information Leak Bug in Netscape Mail"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Sun Nov 25 2001 - 20:12:33 PST