[23247] in bugtraq
Re: Information Leak Bug in Netscape Mail
daemon@ATHENA.MIT.EDU (Stephen Cope)
Sun Nov 25 23:27:28 2001
Date: Sat, 24 Nov 2001 14:58:02 +1300
From: Stephen Cope <mail-e-9657c50c5a36fd34d2@kimihia.org.nz>
To: bugtraq@securityfocus.com
Message-ID: <20011124145802.E1061@mess.kimihia.org.nz>
Mail-Followup-To: bugtraq@securityfocus.com
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-ripemd160;
protocol="application/pgp-signature"; boundary="F8dlzb82+Fcn6AgP"
Content-Disposition: inline
In-Reply-To: <20011123150711.B2042@ringworld.org>
--F8dlzb82+Fcn6AgP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Scott Dier wrote:
: I believe this was reported to Mozilla's bugzilla eons ago and Is *not*
: leaking information (tested with 0.9.5)
http://bugzilla.mozilla.org/show_bug.cgi?id=3D83038
It was fixed around 0.9.2 which was several months ago. Debian stable
still ships M18, so that is vulnerable. 0.9.6 was released a few days=20
ago.
Somewhere in the awful rambling by "GOBBLES" it mentioned they liked to
use Netscape 4, which was what they were complaining about. Clearer
English and less rambling would have helped a lot.
--=20
Stephen Cope - http://sdc.org.nz/
--F8dlzb82+Fcn6AgP
Content-Type: application/pgp-signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: See http://sdc.org.nz/email for more detail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=INUa
-----END PGP SIGNATURE-----
--F8dlzb82+Fcn6AgP--
