Re: Buffer Overruns

[Joseph S D Yao <jsdy () cospo osis gov>]

On Fri, Dec 17, 1999 at 06:16:32AM -0500, Michael Kelly wrote:
>  I really feel silly asking this, but;
>  Can these buffer overrun bugs penetrate firewalls? I'm trying to
> convince the boss to ditch IE in favor of Netscape. (which is only
> slightly better)

Yes, unless it is a proxied firewall that specifically looks for and
excludes them.  I believe some of the code that "breaks" complex HTTP in
old FWTK was there to protect browsers in just such cases.  Of course,
because it "breaks" some code, the users don't want that protection ...

-- 
Joe Yao                         jsdy () cospo osis gov - Joseph S. D. Yao
COSPO/OSIS Computer Support                                     EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.