[50] in Best-of-Security
BoS: FW:[ANNOUNCE] MSIE/Netscape Java Hacks (fwd)
daemon@ATHENA.MIT.EDU (Darren Reed)
Thu Feb 27 07:32:23 1997
From: Darren Reed <avalon@coombs.anu.edu.au>
Date: Thu, 27 Feb 1997 01:28:41 +1100 (EDT)
Reply-To: best-of-security@suburbia.net
Errors-To: best-of-security-request@suburbia.net
To: best-of-security@suburbia.net
Resent-From: best-of-security@suburbia.net
>From com-priv@lists.psi.com Thu Feb 27 00:57:39 EDT 1997
Date: Wed, 26 Feb 1997 08:51:22 -0500
Message-Id: <199702261350.AA16194@internet-mail2.ford.com>
Errors-To: listadm@lists.psi.com
Reply-To: bkaras@ford.com
Originator: com-priv@lists.psi.com
Sender: com-priv@lists.psi.com
Precedence: bulk
From: Brian Karas <bkaras@ford.com>
To: Multiple recipients of list <com-priv@lists.psi.com>
Subject: FW:[ANNOUNCE] MSIE/Netscape Java Hacks
X-Listprocessor-Version: 6.0c -- ListProcessor by Anastasios Kotsikonas
X-Comment: Commercialization and Privatization of the Internet
A.L. Digital Announce Java Hacks
--------------------------------
25th Feb 1997
A.L. Digital, in association with Ben Laurie and Major Malfunction, have
found
and exploited a loophole in Microsoft Internet Explorer V3.01.
In brief, this loophole allows an attacker to connect to any TCP/IP port
on
the client's machine.
A less serious hole has also been found in Netscape Navigator V3.0. This
permits an attacker to discover the client's hostname and IP address
despite
firewalls or even anonymizers.
A.L. Digital notified Microsoft and Netscape of these problems as soon
as they
were discovered, in January, and delayed public release to allow them to
work
around the problems.
A.L. Digital is a high-tech consultancy, specialising in Internet and
security
matters.
Full details can be found at http://www.alcrypto.co.uk/java
--
Ben Laurie Phone: +44 (181) 994 6435
Freelance Consultant and Fax: +44 (181) 994 6472
Technical Director Email: ben@algroup.co.uk
A.L. Digital Ltd. URL: http://www.algroup.co.uk
London, England. Apache Group member
