Netscape Communicator和Navigator文件泄露漏洞

漏洞信息详情

Netscape Communicator和Navigator文件泄露漏洞

漏洞简介

Netscape Communicator和Navigator 4.04到4.74版本存在漏洞。远程攻击者可以通过使用Java程序打开使用“file”,“http”,“https”,和“ftp”协议的URL连接读取任意文件,正如Brown Orifice。

漏洞公告

参考网址

来源:CERT/CC Advisory: CA-2000-15
名称: CA-2000-15
链接:http://www.cert.org/advisories/CA-2000-15.html

来源: BID
名称: 1546
链接:http://www.securityfocus.com/bid/1546

来源: REDHAT
名称: RHSA-2000:054
链接:http://www.redhat.com/support/errata/RHSA-2000-054.html

来源: SUSE
名称: 20000823 Security Hole in Netscape, Versions 4.x, possibly others
链接:http://www.novell.com/linux/security/advisories/suse_security_announce_60.html

来源: CALDERA
名称: CSSA-2000-027.1
链接:http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt

来源: BUGTRAQ
名称: 20000821 MDKSA-2000:036 – netscape update
链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html

来源: BUGTRAQ
名称: 20000818 Conectiva Linux Security Announcement – netscape
链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html

来源: BUGTRAQ
名称: 20000810 MDKSA-2000:033 Netscape Java vulnerability
链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html

来源: BUGTRAQ
名称: 20000804 Dangerous Java/Netscape Security Hole
链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html

来源: FREEBSD
名称: FreeBSD-SA-00:39
链接:ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc

© 版权声明
THE END
喜欢就支持一下吧
点赞0 分享