SI
SI
discoversearch

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor.  We ask that you disable ad blocking while on Silicon Investor in the best interests of our community.  If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.
SI - Site Forums : Silicon Investor - Welcome New SI Members! -- Ignore unavailable to you. Want to Upgrade?


To: Cheeky Kid who wrote (3682)11/26/1998 9:52:00 PM
From: SIer formerly known as Joe B.  Read Replies (2) | Respond to of 32873
 
The JavaScript Cache Browsing Bug
home.netscape.com

Netscape has recently been alerted to a security vulnerability
that affects the Netscape Navigator browser software. The JavaScript Cache Browsing bug affects the Windows versions of Navigator 3.04 and 4.07 and Netscape Communicator 4.5. (Note: Mac OS and Unix versions are NOT affected.) Although Netscape has verified this bug, no customer incidents of lost or stolen data have been reported to Netscape. Netscape takes all potential security and privacy issues seriously and is currently working on a fix. An update will be posted on the Netscape web site soon.

The bug can be exploited by a web site that runs a malicious program to read the URLs from a user's cache. Under ordinary circumstances, Netscape does not believe that users browsing known, trusted sites are at risk. However, if a user visits an unknown, untrusted site, the operator of that site could potentially read this information from the cache.

Since the bug relies on JavaScript to reveal information, you can avoid its effect by turning off JavaScript when browsing unknown, untrusted sites. To do this, take the following steps:


1.In Communicator, select Preferences from the Edit menu.
2.In the Preferences dialog box, select the Advanced category.
3.Deselect the Enable JavaScript checkbox.
4.Click OK.