netscape.window.spoof.txt

Date: Tue, 16 Feb 1999 09:46:05 PST From: Georgi Guninski To: [email protected] Subject: Netscape Communicator window spoofing bug There is a bug in Netscape Communicator 3.04,4.06,4.5 Win95 and 4.08 WinNT, which allows "window spoofing". After visiting a hostile page or clicking a hostile lin...

netscape.directory.server.4.txt

Date: Mon, 03 May 1999 08:45:25 -0400 From: "Bobby, Paul" To: "'[email protected]'" Subject: bug/Netscape-DirectoryServer4 After installing Netscape's Directory Server 4 for Solaris, one of the final options is to remove a file called 'install.inf' which the install process claims coul...

browser.bookmarks.txt

Date: Sun, 9 May 1999 17:34:10 +0300 From: Georgi Guninski To: [email protected] Subject: Bookmarks security vulnerabilities in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 There is a design flaw in both Internet Explorer 5.0 and Netscape Communicator 4.51 Win95 guess all 4....

WinWebserver-exploit.txt

http://www.sddt.com/files/library/98/06/25/tbc.html Source Programmers Discover Internet Server Bug Daily Transcript Business Report June 25, 1998 Programmers at San Diego Source, the online news service of the San Diego Daily Transcript, have discovered a security hole affecting Web server...

lydia.passwd.txt

Yet Another password storing problem was: Re: Possible Netscape Yiorgos Adamopoulos [email protected] Fri, 19 Feb 1999 16:58:13 +0200 On Tue, Feb 16, 1999 at 01:02:08PM -0600, HD Moore wrote: The password is still in the registry after you close netscape, Now that we are talking about...

netscape.viewtrack.txt

Date: Sun, 6 Jun 1999 13:15:08 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator code injection in JavaScript console using "view-source:" protocol There is a bug in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x are affected, which allows sniffing...

netscape4.5-nsform.tmp.txt

02-FEB-99 - http://www.skylab.org/netscape/index.html Yet another browser bug was found late last week. This time in Netscape's Communicator 4.5. The problem appears with the way Netscape handles forms. In many cases, the browser will store data entered on a FORM in C:\WINDOWS\TEMP in a NSFORM.TM...

netscape.passwd.txt

Possible Netscape Crypto Security Flaw Haze [email protected] Sun, 14 Feb 1999 21:13:46 -0600 When you go into Netscape Messenger and check your mail, the software stores the password you used in the registry and encrypts it. It remains there for as long as netscape is open. The login and password is...

netscape.view.source.javascript.txt

Date: Tue, 1 Jun 1999 19:08:49 +0300 From: Georgi Guninski To: [email protected] Subject: Netscape Communicator "view-source:" security vulnerabilities There is a security vulnerability in Netscape Communicator 4.6 Win95, 4.07 Linux probably all 4.x versions in the way it works with...

browser.forkbomb.txt

Jim Paris http://home.jtan.com/jim/bugs/both/fork.html Repeated Browser Spawning New browser windows can be opened automatically with Javascript's window.open command. This page simply spawns a neverending supply of windows. This is similar to the Unix "while1fork;" attack. Any browser that...

netscape.coredump.txt

Problem with Netscape Navigator Core Dumps When Netscape Navigator for unix dumps core, at least the following are readily extractable from the core dump: the complete contents of the user's bookmarks file the URL of every site visited in the session the text of every site visited in the session...

netscape.fasttrack.3.x.txt

Date: Mon, 7 Jun 1999 10:59:15 +0200 From: "iso-8859-1 Jesús López de Aguileta" To: [email protected] Subject: Netscape Fasttrack 3.01 allows directory listing Hi all, I recently have downloaded a trial version of Fasttrack server 3.01 for NT According to Netscape documentation:...

hotmail-attack-082698.txt

Date: Wed, 26 Aug 1998 18:21:40 +0200 From: Jonathan James Subject: SV: Serious Security Hole in Hotmail Dear all. I've got some e-mail-requests concerning my "second" version of the "hotmail flaw", so I've decided to post the code. This has been tested on IE 4.0 and Netscape 3.0 . The code...

frame.spoof.txt

Date: Thu, 18 Feb 1999 10:36:49 PST From: Robert Thomas To: [email protected] Subject: Re: Netscape Communicator window spoofing bug -Junk deleted- This was reported back in the November, December time frame by secureexperts.com as a frame spoof bug. MS came up with a lame patch for IE that...

netscape-internal-parser.cgi

Date: Mon, 5 Oct 1998 16:33:13 -0400 From: Jim Paris To: [email protected] Subject: Remote CGI can crash Netscape 4.x Netscape 4.x will crash when given a content-type of "internal/parser". Earlier versions seem unaffected. Tested versions are 4.05 and 4.5b1. Under Win95 it simply hangs and...

netscapemail.txt

Date: Wed, 29 Jul 1998 10:04:05 +0200 From: Paul Boehm Subject: Re: netscape mail overflowanother one On Tue, Jul 28, 1998 at 08:21:41PM +0200, Paul Boehm wrote: Hi, netscape mail crashes when trying to the attachment ^- save from the following pseudo mime mail: sorry for posting twice, but this ...

netscape.4.x-javascript.txt

Date: Wed, 28 Oct 1998 10:22:02 PST From: Georgi Guninski Subject: Javascript bug in Netscape Communicator 4.5 There is a bug in Netscape Communicator 4.5, 4.07, 3.04 under Windows 95 probably others which allows reading user's cache the urls the user has visited, including the info in GET forms...

netscape4x.internal.parser.txt

Jim Paris http://home.jtan.com/jim/bugs/ns/parser.html Netscape 4.x "internal/parser" bug Some versions of Netscape will simply hang when given a MIME type of internal/parser. Netscape was never designed to handle this type coming from the outside world. Versions 4.04 through the most current...

pop-spoof.pl

This is a simple tcp server that listens on port 110 unless another is specified. The possible uses of this are; Netscape/explorer mail password caching/grabbing In netscape edit your prefs.js file so that your pop server is your own ip 127.0.0.1 then open netscape and click on get mail then this...

ns4.5-mail-passwd.txt

Date: Wed, 4 Nov 1998 18:29:55 +0100 From: Holger van Lengerich To: [email protected] Subject: Communicator 4.5 stores EVERY mail-password in preferences.js Hi! The Netscape Communicator 4.5 stores the crypted version of used mail-passwords for imap and pop3 even if you tell Netscape to not...