[4735] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Netscape Exploit SOLVED

daemon@ATHENA.MIT.EDU (Yusuf Motiwala)
Thu Jun 19 19:39:42 1997

Date: 	Wed, 18 Jun 1997 13:17:36 +0500
Reply-To: Yusuf Motiwala <ymotiwala@HSS.HNS.COM>
From: Yusuf Motiwala <ymotiwala@HSS.HNS.COM>
X-To:         "Paul T. Kooros" <kooros@TITAN.SRRB.NOAA.GOV>
To: BUGTRAQ@NETSPACE.ORG
In-Reply-To:  <9706161802.AA06402@titan.srrb.noaa.gov>

Hello Paul,

I think this will not work. First, on reload, netscape fills
< INPUT TYPE=FILE ..> only if the file is local e.g. it will
work with file:/myserver/rootpath/abc.html but will not work with
http://myserver/abc.html.

Second, history.go(0) will not reload the file unless it is on local
machine (or not in cache..????).

Regards,

Yusuf

=======================================================================
Yusuf Motiwala
Hughes Software System,
Electronic City,
Plot-31, Sector-18,
Gurgaon - 122 015
Haryana, India

Phone: 91-124-346 666 ext. 2296 (o)

home help back first fref pref prev next nref lref last post