[2288] in bugtraq

home help back first fref pref prev next nref lref last post

Re: Ray Cromwell: Another Netscape Bug (and possible security

daemon@ATHENA.MIT.EDU (Howard B Owen)
Sat Sep 30 02:55:44 1995

Date:         Fri, 29 Sep 1995 18:52:59 -0700
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Howard B Owen <hbo@OCTEL.COM>
X-To:         BUGTRAQ@CRIMELAB.COM
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To:  <Pine.OSF.3.90.950922204501.5754I-100000@amadeus.ucsf.edu>
              (message from Jim Wright on Fri, 22 Sep 1995 20:52:59 -0700)

>On Fri, 22 Sep 1995, Howard B Owen wrote:
>> > [reference to long host name in url causing core dump]
>>
>>   I cannot reproduce this bug on the following platforms:
>Jim Wright:
>look at http://keck.ucsf.edu/~jwright/ and click on the BOMB icon.
>i've toasted netscape 1.2n, lynx 2.3.7, mosaic 2.7b1, arena 0.97h.
>however, weblint 1.011 has no problem with it.

   I posted back to the list last Sunday that I had been able to
reproduce the bug on every platform I tried after I turned off proxy
forwarding of http. Makes sense when you think about it.

:Matthew James Sheppard wrote in private email:
:
::Make sure your proxy is turned off, else the error is handled correctly.
:
:Right you are. I can now reproduce the bug on all three platforms.
:
:Mosaic 2.4 on SunOS 4.1.4 does not manifest the bug as far as I've
:been able to determine. Neither does Microsoft Internet Explorer on
:Windows 95.
:
:My stomach hurts. 8(

  My stomach feels a little better now. Netscape's latest releases fix
the problem on each of the above platforms. At least the original long
domain URL no longer crashes the browser.

--
Howard Owen hbo@octel.com   Octel Communications Corporation  1024/DC671C31 =
Internet Guy/Webmaster      1001 Murphy Ranch Rd.             37 A0 46 EE BE
408-324-6576 Voice and FAX  Milpitas CA 95035-7912            95 DB 92 E8 39
I am not a pay TV service!  http://www.egbok.com/hbo.html     80 89 A9 F9 3D FB

home help back first fref pref prev next nref lref last post