Netscape Users are open to security hole, no matter what OS you run.

[Rags]

Hi all, I have been reading around a bit about Brown Orifice. Basically what it is is a flaw in the java run with netscape. That flaw can be exploited using a program to open up a port on your computer, allowing total read access to all of your files. This time it's not a MS only problem. This is OS independent, so far there is no patch other than not running nutscrape. Here is a place to get you started on what this does. This doesn't look too good, though.

Rags

[DentyCracker]

Under Linux does it give the exploiter superuser status

[Rags]

I don't think so, and I don't believe it can obtain any other status's on win2k, either. But the point is, if you are online, and are logged on as a superuser/administrator/some-account-that-has-read-rights-to-all-files, then it's as easy as copying the info straight from your hard drive. Changes cannot be made to your hd contents, but I am sure that you can guess the implications of being able to copy any file one wishes to from your hard drive.

Rags

[Rags]

Firewalls will have zero effect on this hole. If you close up the port completely, you will not be able to run NS. As far as zonealarm is concerned, NS is allowed to transfer info, and that is exactly what happens. Aint java scripts wonderful?

Rags

[xortam]

Yeah, its a real pain to make your browsers secure. If you disable Java (I do, all but Java scripts), and MS's ActiveVirus, and heavens forbid, cookies, browsing becomes a nightmare. You just have to find a level of security that you can afford.

[Rags]

This just goes to show that ANY OS is vulnerable to hacks. Care must be taken for sure.

I thought more people would be interested in knowing about this, but I guess nobody uses Nutscrape any longer

Rags



------------------
Partnership for an idiot free America