漏洞信息详情
Netscape Communicator和Navigator文件泄露漏洞
漏洞简介
Netscape Communicator和Navigator 4.04到4.74版本存在漏洞。远程攻击者可以通过使用Java程序打开使用“file”,“http”,“https”,和“ftp”协议的URL连接读取任意文件,正如Brown Orifice。
漏洞公告
参考网址
来源:CERT/CC Advisory: CA-2000-15 名称: CA-2000-15 链接:http://www.cert.org/advisories/CA-2000-15.html 来源: BID 名称: 1546 链接:http://www.securityfocus.com/bid/1546 来源: REDHAT 名称: RHSA-2000:054 链接:http://www.redhat.com/support/errata/RHSA-2000-054.html 来源: SUSE 名称: 20000823 Security Hole in Netscape, Versions 4.x, possibly others 链接:http://www.novell.com/linux/security/advisories/suse_security_announce_60.html 来源: CALDERA 名称: CSSA-2000-027.1 链接:http://www.calderasystems.com/support/security/advisories/CSSA-2000-027.1.txt 来源: BUGTRAQ 名称: 20000821 MDKSA-2000:036 - netscape update 链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0265.html 来源: BUGTRAQ 名称: 20000818 Conectiva Linux Security Announcement - netscape 链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0236.html 来源: BUGTRAQ 名称: 20000810 MDKSA-2000:033 Netscape Java vulnerability 链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0115.html 来源: BUGTRAQ 名称: 20000804 Dangerous Java/Netscape Security Hole 链接:http://archives.neohapsis.com/archives/bugtraq/2000-08/0019.html 来源: FREEBSD 名称: FreeBSD-SA-00:39 链接:ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:39.netscape.asc
受影响实体
- Netscape Communicator:4.0<!--2000-1-1-->
- Netscape Communicator:4.04<!--2000-1-1-->
- Netscape Communicator:4.05<!--2000-1-1-->
- Netscape Communicator:4.06<!--2000-1-1-->
- Netscape Communicator:4.07<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...