[107307] in Cypherpunks
Netscape JavaScript Cache Browsing Bug
daemon@ATHENA.MIT.EDU (Lynne L. Harrison)
Sat Jan 9 22:00:17 1999
Date: Sat, 09 Jan 1999 21:35:45 -0500
To: cypherpunks@Algebra.COM
From: "Lynne L. Harrison" <lharrison@dueprocess.com>
Reply-To: "Lynne L. Harrison" <lharrison@dueprocess.com>
I recently had the pleasure of a malicious java script encounter. Don't
know which site I picked it up from since I was surfing for info about a
particular subject. I received an alert so I denied the request for a
certificate. Alas, I had to reboot because of another Windows problem.
After reboot, the certificate denying access wasn't there, but when I
started Composer, it began to run. Virus scan was negative.
I ended up saving my cookies and bookmark files, deleted Netscape entirely,
and re-installed which seemed to work - no more applets.
Has anyone else had this problem? Netscape's answer (see below) is to
dis-enable java script while they work on a patch. Any other steps one
should take if one has bumped into this problem?
http://home.netscape.com/products/security/resources/bugs/jscachebrowsing.html
***********************************************************
Lynne L. Harrison, Esq. | "The key to life:
Poughkeepsie, New York | - Get up;
mailto:lharrison@dueprocess.com | - Survive;
http://www.dueprocess.com | - Go to bed."
***********************************************************
DISCLAIMER: I am not your attorney; you are not my client.
Accordingly, the above is *NOT* legal advice.