diff options
| author | Trevor Johnson <trevor@FreeBSD.org> | 2002-02-10 23:05:22 +0000 |
|---|---|---|
| committer | Trevor Johnson <trevor@FreeBSD.org> | 2002-02-10 23:05:22 +0000 |
| commit | d0b2fd28275c412a64bc14cad36159bde90c96ab (patch) | |
| tree | e1db96096e2ae4ea31da036d952d944111b6cd24 /games | |
| parent | New port, Kerberos V 1.2.4-beta1. (diff) | |
Send the BSD/OS Netscape ports to Davy Jones' locker.
They have at least two dangerous bugs:
- a buffer overflow in the password field of HTML forms can lead
to execution of hostile code, as reported by Michal Zalewski at
(URL:http://www.securityfocus.com/archive/1/136137). This was the
subject of advisory FreeBSD-SA-00:66.
- if JavaScript is enabled, JavaScript code embedded in the comment
blocks of images can be executed. This can result in sensitive
information being sent to a Web server. The bug was reported by
Florian Wesch at (URL:http://www.securityfocus.com/archive/1/175060)
and (URL:http://www.dividuum.de/).
Requested by: nectar
Notes
Notes:
svn path=/head/; revision=54501
Diffstat (limited to 'games')
0 files changed, 0 insertions, 0 deletions