[3300] in WWW Security List Archive
Java Script
daemon@ATHENA.MIT.EDU (Royans K Tharakan)
Sat Oct 19 12:51:51 1996
Date: Fri, 19 Apr 1996 08:31:42 -53000
To: www-security <www-security@ns2.rutgers.edu>
From: Royans K Tharakan <rkt@poboxes.com>
Errors-To: owner-www-security@ns2.rutgers.edu
Hi,
Many of you must be knowing that there is a security bug in Netscape which
allows the web page to send an E-Mail (and address goes along with it)
without warning the user.
I haven't tested it out yet... but it seems to be present in only Netscape
3.0.
Could someone elaborate on this. I know how to do it... but I don't know
which all browsers are at risk.
...have a nice day.
---Royans
_____________________________________
/\ \
\_| Royans K Tharakan |
| |
| rkt@poboxes.com |
| |
| Tel: +91 11 4636689 |
| _________________________________|_
\_/__________________________________/