[1278] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: SECURITY ALERT: Password protection bug in Netscape 2.0b3

daemon@ATHENA.MIT.EDU (Michael Kerr)
Tue Dec 19 15:19:26 1995

Date: Tue, 19 Dec 1995 11:34:11 -0500 (EST)
From: Michael Kerr <mkerr@largnet.uwo.ca>
To: "Lincoln D. Stein" <lstein@genome.wi.mit.edu>
Cc: www-security@ns2.rutgers.edu, jcarroll@redman.canada.dg.com,
        tara@linkage.cpmc.columbia.edu
In-Reply-To: <v02140359acfb649e222f@[18.157.0.189]>
Errors-To: owner-www-security@ns2.rutgers.edu

On Mon, 18 Dec 1995, Lincoln D. Stein wrote:

> For those who are having trouble reproducing this bug, there is a
> demonstration at URL.  Note that this URL is _not_ a Netscape server, but
> Apache.  The bug is on the browser side, not the server side.
> 
>         http://www-genome.wi.mit.edu/~lstein/unprotected/

I'm using Netscape 2.0b3 for Windows 3.1 and can't reproduce the bug.

Mike.

=============================================================================
Michael Kerr (Webmaster)		  PHONE: (519) 685-8300 x7364
Victoria Hospital 			    FAX: (519) 685-8305
World Wide Web Development Team               http://www.vichosp.london.on.ca


home help back first fref pref prev next nref lref last post