lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <Pine.A41.4.44.0310080007590.47216-100000@zivunix.uni-muenster.de>
From: schonef at uni-muenster.de (Marc Schoenefeld)
Subject: Opera/Netscape/Mozilla: Floppy access from liveconnect html page
 (fwd)

Hi,

just tried the following html page in opera 72/netscape 72/mozilla
on windows and I was prompted with an insert floppy prompt box.
The page was uploaded to a remote site and loaded from there.

(script)
a=Packages.org.apache.crimson.tree.XmlDocument.createXmlDocument("file:///a:/");
(/script)

Can anybody try this please to verify the issue ? Instead of a:
you could also please try com1/lpt1/prn/aux/clock$.

My used java version is jdk 1.4.2_01 browser plugin.

Thanks Marc

--

Never be afraid to try something new. Remember, amateurs built the
ark; professionals built the Titanic. -- Anonymous

Marc Sch?nefeld Dipl. Wirtsch.-Inf. / Software Developer
[ PGP Signature ok - Wed Oct  8 00:07:59 MES 2003 ]


Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ