It's not over yet.

[Jim.W.Manley () LMCO COM (Manley, Jim W)]

-----BEGIN PGP SIGNED MESSAGE-----

I just finished testing this with Netscape 3.02 and Communicator 4.01.

Netscape 3.02 DID NOT appear to fix the problem demonstrated by
going to sight

                http://www.aleph2.com/tracker/

A couple of things I did note:

1.  If the option to notify the user when submitting a form insecurely
is
selected,
everytime I changed locations, the warning banner appeared in the upper
left
hand corner.

2.  In the tool bar that displays what applications are running, there
was
always
one more Netscape process than I had Netscape window open.

Communicator 4.01 did not seem to be affected by the problem.  After
connecting
to the tracker site, I was able to move around to several other sites
and none
of
the activity was tracked.

Jim Manley
LMTAS

-----BEGIN PGP SIGNATURE-----
Version: 4.5

iQCVAwUBM8VXSOir2CBIaWGxAQFLpAP+On2pDhYv3KHqrEhU3WXn+O4qpnFFUqtx
9AsOLqRHWuLoIbefmz4qAdpKHalczfIm2UFqmqw2CRBQmqajASHo1tYcHxQLL9aK
SYH6zal8E2BVJGutqn/URQFscV7IKanNpQzHRs/4GzQYBXtyTEToWe4RhnStT/Fq
gL3gjSWeyvw=
=oM4N
-----END PGP SIGNATURE-----

> ----------
> From:         Dominick Matthias PN OIL 6
> Sent:         Thursday, July 10, 1997 9:54 AM
> To:   Manley, Jim W; BUGTRAQ
> Subject:      Re: CERT Advisory CA-97.20 - JavaScrip
>
> Has anyone else already tried out Netscape Navigator 3.02? It claims
> that it fix the bug found by the Danish company plus the JavaScript
> bug
> found by Bell labs; PC-world reports that this is the new JavaScript
> bug
> found by Dan Brumleve
> (http://www.pcworld.com/cgi-bin/database/body.pl?ID=970709180417).
> While
> the fix of the first bug seems to work  I can still reproduce the 2nd
> bug by going to the author's page at
>
>
> I got my version for (German) Windows 95 at
>
>
> ftp://ftp.netscape.com/pub/navigator/3.02/shipping/english/windows/win
> d
> ows95_or_nt/navigator_complete/
>                 n32e302p.exe    [Jul 07  20:21] 5835k
>
> Confused...
> -- Matthias
>
>
>
> ----------