Bugtraq mailing list archives
[ANNOUNCE] MSIE/Netscape Java hacks (fwd)
From: ben () GONZO BEN ALGROUP CO UK (Ben Laurie)
Date: Tue, 25 Feb 1997 18:34:37 +0000
Ben Laurie wrote:
From ben Tue Feb 25 18:32:11 1997
Subject: [ANNOUNCE] MSIE/Netscape Java hacks To: www-security () ns2 rutgers edu Date: Tue, 25 Feb 1997 18:32:10 +0000 (GMT) From: Ben Laurie <ben () gonzo ben algroup co uk> Cc: <ben () gonzo ben algroup co uk> Reply-To: ben () algroup co uk X-Mailer: ELM [version 2.4 PL24 PGP2] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Length: 1150 Message-ID: <9702251832.aa22866 () gonzo ben algroup co uk> A.L. Digital Announce Java Hacks -------------------------------- 25th Feb 1997 A.L. Digital, in association with Ben Laurie and Major Malfunction, have found and exploited a loophole in Microsoft Internet Explorer V3.01. In brief, this loophole allows an attacker to connect to any TCP/IP port on the client's machine. A less serious hole has also been found in Netscape Navigator V3.0. This permits an attacker to discover the client's hostname and IP address despite firewalls or even anonymizers. A.L. Digital notified Microsoft and Netscape of these problems as soon as they were discovered, in January, and delayed public release to allow them to work around the problems. A.L. Digital is a high-tech consultancy, specialising in Internet and security matters. Full details can be found at http://www.alcrypto.co.uk/java -- Ben Laurie Phone: +44 (181) 994 6435 Email: ben () algroup co uk Freelance Consultant and Fax: +44 (181) 994 6472 Technical Director URL: http://www.algroup.co.uk/Apache-SSL A.L. Digital Ltd, Apache Group member (http://www.apache.org) London, England. Apache-SSL author -- Ben Laurie Phone: +44 (181) 994 6435 Email: ben () algroup co uk Freelance Consultant and Fax: +44 (181) 994 6472 Technical Director URL: http://www.algroup.co.uk/Apache-SSL A.L. Digital Ltd, Apache Group member (http://www.apache.org) London, England. Apache-SSL author
Current thread:
- [ANNOUNCE] MSIE/Netscape Java hacks (fwd) Ben Laurie (Feb 25)