Bugtraq mailing list archives
Re: Netscape Communicator 4.5 can read local files
From: haddock () UDEL EDU (Terence Christopher Haddock)
Date: Wed, 25 Nov 1998 14:22:12 -0500
Ben Collin's file contains the text "this is really stupid.". He's running an UNIX version of Netscape, so I had to modify the script. Unfortunately, the following does not work under both UNIX and Windows: sl=window.open("wysiwyg://1/file://"); It works under UNIX, but not under Windows. A simple check of the OS would take care of the distinction, however, so that wouldn't slow any would-be hackers down. Also, if they know their target, then they know what kind of OS they're dealing with. Sincerely, Terence C. Haddock University of Delaware On Wed, 25 Nov 1998, Ben Collins wrote:
I would just like to say that I find it hard to believe so much fuss has been made about this. It is clear that this is only a local 'trick' to look like it has gotten info. There used to be earlier versions of this where ppl would make a link to file:///C|/ and say they had your hardrive contents on their webpage, and now that java/javascript is involved everyone is freaking out over the same thing just done a litte more elaborately. If some one here can setup a webpage, send me the URL, have that page read the file '/test.txt' from my hardrive and then that person send the contents to this list, I will believe. Otherwise I think this whole hysteria over 'unforseen' dangers should stop. -- ----- -- - -------- --------- ---- ------- ----- - - --- -------- Ben Collins <b.m.collins () larc nasa gov> Debian GNU/Linux UnixGroup Admin - Jordan Systems Inc. bcollins () debian org ------ -- ----- - - ------- ------- -- The Choice of the GNU Generation
Current thread:
- Re: Netscape Communicator 4.5 can read local files, (continued)
- Re: Netscape Communicator 4.5 can read local files Trev (Nov 23)
- Re: Netscape Communicator 4.5 can read local files Norbert Luckhardt (Nov 26)
- Re: Netscape Communicator 4.5 can read local files GNSS Research Division (Nov 23)
- Re: Netscape Communicator 4.5 can read local files Bill Lavalette (Nov 23)
- Re: Netscape Communicator 4.5 can read local files Andrew McNaughton (Nov 24)
- Re: Netscape Communicator 4.5 can read local files The Spirit of the Black Panther (Nov 23)
- Re: Netscape Communicator 4.5 can read local files Ryan Russell (Nov 24)
- Re: Netscape Communicator 4.5 can read local files Ben Collins (Nov 25)
- APC PowerNet SNMP Adapter Security Issues - Beta Firmware Paul Mansfield (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Pavel Kankovsky (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Terence Christopher Haddock (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Ben Collins (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Terence Christopher Haddock (Nov 25)
- XFree86 3.3.3 Released Aleph One (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Trev (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Ben Collins (Nov 25)
- Re: Netscape Communicator 4.5 can read local files kpm (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Sven Carstens (Nov 25)
- Re: Netscape Communicator 4.5 can read local files Michael Teichmann (Nov 26)
- Re: Netscape Communicator 4.5 can read local files Trev (Nov 27)
- Java Redirect Bug - Netscpape 4.0[678] and 4.5 Keith Woodard (Nov 27)
- ipfwadm has pseudo-DoS ;) Domas Mituzas (Nov 28)