Re: Information Leak Bug Discovered in Netscape Mail!

From: 3APA3A (3APA3Aat_private)
Date: Thu Nov 22 2001 - 01:08:59 PST

  • Next message: Paul Rogers: "Forwarded mail...."

    Hello vuln-dev,
    
    You  should  check  Bugtraq  articles  before  posting it to lists. This
    information  was  posted  in  Bugtraq by SECURITY.NNOV. You can find our
    original advisory on
    
    http://www.security.nnov.ru/advisories/netscape1.asp
    
    Bugtraq archieve:
    
    http://www.securityfocus.com/cgi-bin/archive.pl?id=1&start=2001-11-19&end=2001-11-25&mid=188748&threads=1
    
    --Thursday, November 22, 2001, 6:12:23 AM, you wrote to vuln-devat_private:
    
    vd> Hello again everyone! 
    
    vd> We at GOBBLES Research have discovered an insecure condition in Netscape 
    vd> mail which could assist an attacker in gaining important information 
    vd> regarding the accounts of those who use the client.  Attached is a copy of 
    vd> our advisory, discussion on the vulnerability, and a proof-of-concept 
    vd> exploit for the condition. 
    
    vd> Enjoy! 
    
    vd> The GOBBLES Research Team
    vd> http://www.bugtraq.org 
    
    
    -- 
    ~/ZARAZA
    Ñýð Èñààê Íüþòîí îòêðûë, ÷òî ÿáëîêè ïàäàþò íà çåìëþ. (Òâåí)
    



    This archive was generated by hypermail 2b30 : Thu Nov 22 2001 - 08:21:50 PST