CVE-2002-0594

CVE-2002-0594 affects Netscape 6 and Mozilla 1.0 RC1 and earlier. A CSS LINK element that triggers an HTTP redirect can let remote attackers determine the existence of local files, exposing partial confidentiality. The CVSS v2 base score is 5.0 (Network, Low complexity, No user interaction). Red ...

CVE-2002-0593

CVE-2002-0593: A buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier can be triggered by a long channel name in an IRC URI, allowing remote DoS and possibly arbitrary code execution. Affected software is Netscape 6 and Mozilla 1.0 RC1 and earlier; the underlying issue is a buffer overfl...

RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)

Disturbing. Netscape sure must be in financial problems since they are selling out on their users security for a lousy $1000. I know for one that I personally will release any future Netscape advisories with full public disclosure and without prior Netscape notification. As a matter of fact, why...

Security Bulletin #00208

Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00208 Date: October 22, 2001 Cross-Ref: Title: Swing The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the information contained in this Security Bulleti...

Символьные линки в Netscape 6 (symbolic link)

Создается временный файл с предсказуемым именем без проверки символьных линков...

Dangerous temp file creation during installation of Netscape 6.

During installation of Netscape 6.01a for Solaris 2.7/8 Sparc, I noticed the file /tmp/admin.3842 was created with mode 644. As you already know if this package is installed by root in multiuser mode a malicious user could use this to overwrite system files etc.. Here is the dangerous code: grep...

Дырки в Netscape 6

Несколько переполнений буфера...

Linux news 8.04.00

Atipa начнет выпуск Linux-компьютеров на базе процессоров Alpha В настоящее время львиная доля Linux-компьютеров работает на базе процессоров Intel. Желая несколько изменить сложившуюся ситуацию, компания Atipa объявила о своем намерении продвигать на рынок Linux-компьютеры на базе процессоров...