From owner-freebsd-security Fri Apr 9 14:32:32 1999 Delivered-To: freebsd-security@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id EA72615CFD for ; Fri, 9 Apr 1999 13:51:34 -0700 (PDT) (envelope-from robert@cyrus.watson.org) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.8.8/8.8.8) with SMTP id MAA21124; Fri, 9 Apr 1999 12:37:42 -0400 (EDT) (envelope-from robert@cyrus.watson.org) Date: Fri, 9 Apr 1999 12:37:42 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org Reply-To: Robert Watson To: Wes Peters Cc: The Tech-Admin Dude , Daniel Hagan , Matthew Dillon , Foxfair Hu , freebsd-security@freebsd.org Subject: Re: Fw: Netscape 4.5 vulnerability In-Reply-To: <370E0826.FB33CE2@softweyr.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, 9 Apr 1999, Wes Peters wrote: > The Tech-Admin Dude wrote: > > > > On Fri, 9 Apr 1999, Wes Peters wrote: > > > > > My umask is 022 and my .netscape directory is 700. I didn't change it, > > > so Netscape must have created it that way. This is Communicator 4.5 > > > (linux version; it's more reliable than the FreeBSD binary) on 3.1. > > > > > I'm using the FreeBSD binary and it is only readable to my UID also, and I > > have not changed a thing.. One is not more reliable than the other, its > > the same code folks.. > > On 3.1, I cannot keep the FreeBSD binary running for more than a few seconds. > That's a notable difference to me, at least. It looks like Netscape does create the directory correctly, so as surmised, it looks like this is "yet another person complaing about encrypted passwords that need to be decryptable for the program to function"; unless of course there is a version of Netscape that doesn't do it right; evidence suggests otherwise. This conversation is rapdily leaving the realm of security; any followups on stability to -hackers please :-). Netscape 4.5 communicator seems fairly stable on my 4.0-CURRENT machine as of just pre-egcs; when I go heavily java, occasionally windows get stuck wherein I can't follow links; opening a new window and closing the old usually fixes that. Robert N Watson robert@fledge.watson.org http://www.watson.org/~robert/ PGP key fingerprint: 03 01 DD 8E 15 67 48 73 25 6D 10 FC EC 68 C1 1C Carnegie Mellon University http://www.cmu.edu/ TIS Labs at Network Associates, Inc. http://www.tis.com/ Safeport Network Services http://www.safeport.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message