[2632] in bugtraq
Re: Is _your_ Netscape under remote control
daemon@ATHENA.MIT.EDU (Dave Taylor)
Mon May 27 00:58:41 1996
Date: Fri, 24 May 1996 14:37:27 +0800
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Dave Taylor <taylord@cwr.uwa.edu.au>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: <Pine.LNX.3.92.960524175458.13499A-100000@gw.wherry.com> from
"Phillip Wherry" at May 24, 96 06:01:42 pm
>
> A couple of messages have appeared on the Bugtraq mailing list concerning
> the use of X to control a Netscape client. I think there's a fundamental
> point being missed here: control of the Netscape client is done through X
> properties and thereby REQUIRES that one already have control of the X
> server.
This is more of an idle thought than anything else, but say your Netscape
client is accessing a remote site via a proxy (to get through your
filewall or whatever), and if the client trusted the proxy in terms of
xhost (not entirely unreasonable), would it be possible to control it
from any page it accessed?
David
