From owner-doc-jp@jp.freebsd.org  Wed Sep  6 12:25:26 2000
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id MAA63934;
	Wed, 6 Sep 2000 12:25:26 +0900 (JST)
	(envelope-from owner-doc-jp@jp.FreeBSD.org)
Received: from tortoise.jp.freebsd.org (root@tortoise.jp.FreeBSD.ORG [210.157.158.41])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id MAA63929
	for <doc-jp@jp.freebsd.org>; Wed, 6 Sep 2000 12:25:25 +0900 (JST)
	(envelope-from kuriyama@FreeBSD.org)
Received: from waterblue.imgsrc.co.jp (waterblue.imgsrc.co.jp [2001:218:422:2:2d0:b7ff:fea0:d487])
	by tortoise.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP/IPv6 id MAA06795
	for <doc-jp@jp.freebsd.org>; Wed, 6 Sep 2000 12:25:23 +0900 (JST)
	(envelope-from kuriyama@FreeBSD.org)
Received: from waterblue.imgsrc.co.jp (localhost [127.0.0.1])
	by waterblue.imgsrc.co.jp (8.11.0/8.11.0) with ESMTP id e863OhG75217
	for <doc-jp@jp.freebsd.org>; Wed, 6 Sep 2000 12:25:19 +0900 (JST)
Date: Wed, 06 Sep 2000 12:24:43 +0900
Message-ID: <7mk8cq9p8k.wl@waterblue.imgsrc.co.jp>
From: Jun Kuriyama <kuriyama@FreeBSD.org>
To: doc-jp@jp.freebsd.org
In-Reply-To: In your message of "3 Sep 2000 00:25:27 GMT"
	<200009030024.JAA28160@mail.geocities.co.jp>
References: <20000828194112.7249837B424@hub.freebsd.org>
	<200009030024.JAA28160@mail.geocities.co.jp>
User-Agent: Wanderlust/1.1.1 (Purple Rain) SEMI/1.13.7 (Awazu) FLIM/1.13.2 (Kasanui) MULE XEmacs/21.1 (patch 12) (Channel Islands) (i386--freebsd)
MIME-Version: 1.0 (generated by SEMI 1.13.7 - "Awazu")
Content-Type: text/plain; charset=ISO-2022-JP
Reply-To: doc-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+000315
X-Sequence: doc-jp 7679
Subject: [doc-jp 7679] Re: ANNOUNCE: FreeBSD Ports Security Advisory: FreeBSD-SA-00:39.netscape
Errors-To: owner-doc-jp@jp.freebsd.org
Sender: owner-doc-jp@jp.freebsd.org
X-Originator: kuriyama@FreeBSD.org

At 3 Sep 2000 00:25:27 GMT,
Hiroki Sato <hrs@geocities.co.jp> wrote:
> JPEG $B$r07$&%3!<%I$K4^$^$l$k%P%C%U%!%*!<%P%U%m!<LdBj$r(B
> $B%/%i%$%"%s%H$+$i0-MQ$9$k$3$H$,$G$-$k2DG=@-$,$"$j$^$9(B.
> $B0-MQ$N$?$a$N%3!<%I$OCN$i$l$F$$$^$;$s$,(B, $B967b<T$O(B
> $B%m!<%+%k%^%7%s>e$N(B netscape $B$r<B9T$7$F$$$k%f!<%6$N8"8B$G(B
> $BG$0U$N%3!<%I$r<B9T$9$k$3$H$,2DG=$G$"$k$+(B, $B$"$k$$$O>/$J$/$H$b(B,
> $B<B9T$7$F$$$k(B netscape $B%P%$%J%j$r%/%i%C%7%e$5$;$k$3$H$O==J,2DG=$G$7$g$&(B.

$B!!!V>/$J$/$H$b!D!D==J,2DG=$G$7$g$&!W$O$J$s$H$J$/=E$J$C$F$k5$$,$9$k$N$G!"(B
"$B==J,(B" $B$H<h$C$?J}$,$$$$$+$J!#(B

> Remote users can read files on the local system accessible to the user
> running netscape, if java is enabled, and may be able to execute
> arbitrary code on the local system as that user.
> 
> $B%j%b!<%H%f!<%6$O(B, netscape $B$r<B9T$7$F$$$k%f!<%6$,%"%/%;%92DG=$J(B,
> $B%m!<%+%k%7%9%F%`>e$N%U%!%$%k$rFI$`$3$H$,$G$-$^$9(B.
> $B$^$?(B, java $B$,M-8z2=$5$l$F$$$k>l9g$K$O(B, $B%m!<%+%k%7%9%F%`>e$N(B
> $B$=$N%f!<%6$N8"8B$GG$0U$N%3!<%I$r<B9T$G$-$k2DG=@-$,$"$j$^$9(B.

$B!!$A$c$s$HFI$a$F$$$J$$$+$bCN$l$J$$$1$I!"(BJava $B$,M-8z$K$J$C$F$$$k>l9g$KLd(B
$BBj$K$J$k$N$O!"(BJPEG $B$NG$0U%3!<%I$NJ}$8$c$J$/$F!"(Blocal file browsing $B$NJ}(B
$B$8$c$J$$$+$7$i!#(B


-- 
Jun Kuriyama <kuriyama@FreeBSD.org> // FreeBSD Project
