Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 6 Apr 1999 18:24:30 +0100
From:      Jeff Dalton <jeff@aiai.ed.ac.uk>
To:        FreeBSD-java@FreeBSD.ORG
Subject:   Re: Fwd: New Hole in Java 2 (fwd)
Message-ID:  <22035.199904061724@todday>
In-Reply-To: Chuck Robey's message of Mon, 5 Apr 1999 14:47:55 -0400 (EDT)

next in thread | raw e-mail | index | archive | help
>   The flaw allows an attacker to create a booby-trapped Web
> page, so that when a victim views the page, the attacker seizes
> control of the victim's machine and can do whatever he wants,
> including reading and deleting files, and snooping on any data and
> activities on the victim's machine.

Is it really the case that the attacker can seize control of a Unix
machine (such as a PC running FreeBSD) and "do whatever he wants",
which seems to imply that he can become root?  Or can he only do
whatever he wants provided it's something "nobody" is able to do?

-- jeff


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-java" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?22035.199904061724>