Date: Fri, 9 Apr 1999 12:37:42 -0400 (EDT) From: Robert Watson <robert@cyrus.watson.org> To: Wes Peters <wes@softweyr.com> Cc: The Tech-Admin Dude <geniusj@phoenix.unacom.com>, Daniel Hagan <dhagan@cs.vt.edu>, Matthew Dillon <dillon@apollo.backplane.com>, Foxfair Hu <foxfair@news.ks.edu.tw>, freebsd-security@freebsd.org Subject: Re: Fw: Netscape 4.5 vulnerability Message-ID: <Pine.BSF.3.96.990409123546.21011C-100000@fledge.watson.org> In-Reply-To: <370E0826.FB33CE2@softweyr.com>
index | next in thread | previous in thread | raw e-mail
On Fri, 9 Apr 1999, Wes Peters wrote: > The Tech-Admin Dude wrote: > > > > On Fri, 9 Apr 1999, Wes Peters wrote: > > > > > My umask is 022 and my .netscape directory is 700. I didn't change it, > > > so Netscape must have created it that way. This is Communicator 4.5 > > > (linux version; it's more reliable than the FreeBSD binary) on 3.1. > > > > > I'm using the FreeBSD binary and it is only readable to my UID also, and I > > have not changed a thing.. One is not more reliable than the other, its > > the same code folks.. > > On 3.1, I cannot keep the FreeBSD binary running for more than a few seconds. > That's a notable difference to me, at least. It looks like Netscape does create the directory correctly, so as surmised, it looks like this is "yet another person complaing about encrypted passwords that need to be decryptable for the program to function"; unless of course there is a version of Netscape that doesn't do it right; evidence suggests otherwise. This conversation is rapdily leaving the realm of security; any followups on stability to -hackers please :-). Netscape 4.5 communicator seems fairly stable on my 4.0-CURRENT machine as of just pre-egcs; when I go heavily java, occasionally windows get stuck wherein I can't follow links; opening a new window and closing the old usually fixes that. Robert N Watson robert@fledge.watson.org http://www.watson.org/~robert/ PGP key fingerprint: 03 01 DD 8E 15 67 48 73 25 6D 10 FC EC 68 C1 1C Carnegie Mellon University http://www.cmu.edu/ TIS Labs at Network Associates, Inc. http://www.tis.com/ Safeport Network Services http://www.safeport.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the messagehelp
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.990409123546.21011C-100000>