Mozilla users hit by flaw while IE left unscathed

Vikingod · Sep 21, 2005, 02:17 PM

A serious security flaw surfaced on Tuesday that turns conventional security assumptions on their head - affecting Firefox and Linux, but leaving Microsoft's Internet Explorer and Windows unscathed.

The bug is in the Linux shell scripts that Firefox and the Mozilla browser suite use to parse Web addresses supplied via the command line or by external programs such as email clients. Researcher Peter Zelezny discovered that commands included in the URL and enclosed in backticks (') were executed by the Linux or Unix shell.
__________
Read More / Source: Techworld

TJ- · Sep 21, 2005, 02:20 PM

i just posted this link in another thread, may as well post it here to

http://news.com.com/Symantec+Mozilla...l?tag=nefd.top

get opera

Erroneus · Sep 21, 2005, 02:54 PM

Or just update to v1.0.7....

Yep thats right, a fix for this problem that fast!

btw. the article at http://news.com.com/Symantec+Mozilla...l?tag=nefd.top is BS.
They are forgetting a lot things:
Firefox are being more devopled then IE and therefore there will also be more new code to have holes in it.
Holes are fixed fast, specially if it's a large hole, just take a look at the flaw mentioned in the thred.
ALOT of the holes are being discovered by Mozilla devl. and fixed fast and present in the next point release.
Some flaws are from nighly builds and fixed right away.
Normally flaws in Firefox aint that dangrous, while in IE, because it's so integrated in Windows, you can really mess up the system.

Dont use IE and if you dont like FF, use Opera, which also is great, though not offering the same features as you can get with Opera and extensions.

Sandok · Sep 21, 2005, 02:56 PM

Oh there are holes in evertyhing and I've never ever been exploited... And I surf dangerously

Matth · Sep 21, 2005, 03:19 PM

I suspect the most secure browser is probably .... www.offbyone.com - just a shame it will make total mincemeat out of most modern sites!

Perhaps both Internet explorer and Mozilla users should consider escaping to the now freeware Opera.

Mind you, credit to Mozilla, their response has been fast - are Micro$loth even capable of responding at speed?

What were the cancelled "patch tuesday" releases going to be, and whatever it was, I guess we're still vulnerable to it?

EcPercy · Sep 21, 2005, 05:44 PM

No reason for me to switch. I got the firefox 1.0.7 nightly build last week.

What have you compromised on my system???

I have not noticed any malware making it's way onto my system since moving to firefox back when it was still in the .x series. Now with firefox in the 1.x series and closer to 2.x we will see some vast improvements.

People are going to find bugs. It is open source software unlike Microsoft where you won't know about a bug until months after it has been out.

YAYitsAndrew · Sep 21, 2005, 05:53 PM

Use opera ftw.

Sep 21, 2005, 02:17 PM	#1
Vikingod Int'l Fish Liaison Join Date: Jul 2004 Location: By the light of lamp I sit and type... Posts: 16,197 Rep Power: 112 System Specs	Mozilla users hit by flaw while IE left unscathed A serious security flaw surfaced on Tuesday that turns conventional security assumptions on their head - affecting Firefox and Linux, but leaving Microsoft's Internet Explorer and Windows unscathed. The bug is in the Linux shell scripts that Firefox and the Mozilla browser suite use to parse Web addresses supplied via the command line or by external programs such as email clients. Researcher Peter Zelezny discovered that commands included in the URL and enclosed in backticks (') were executed by the Linux or Unix shell. __________ Read More / Source: Techworld

Sep 21, 2005, 02:54 PM	#3
Erroneus Get off my lawn! Join Date: Aug 2002 Location: Denmark Posts: 13,419 Rep Power: 119 System Specs	Or just update to v1.0.7.... Yep thats right, a fix for this problem that fast! btw. the article at http://news.com.com/Symantec+Mozilla...l?tag=nefd.top is BS. They are forgetting a lot things: Firefox are being more devopled then IE and therefore there will also be more new code to have holes in it. Holes are fixed fast, specially if it's a large hole, just take a look at the flaw mentioned in the thred. ALOT of the holes are being discovered by Mozilla devl. and fixed fast and present in the next point release. Some flaws are from nighly builds and fixed right away. Normally flaws in Firefox aint that dangrous, while in IE, because it's so integrated in Windows, you can really mess up the system. Dont use IE and if you dont like FF, use Opera, which also is great, though not offering the same features as you can get with Opera and extensions. __________________

Sep 21, 2005, 05:53 PM	#7
YAYitsAndrew Anti-Piracy Poster Boy Join Date: Oct 2004 Location: NJ Posts: 2,605 Rep Power: 79 System Specs	Use opera ftw. __________________ "It is because the resistance to paying for copyrighted material, although often characterized as arising from a supposed technical burden or principled concern for the public interest, arises rather from exactly the same segment of the brain that is dominant in shoplifters." - Mark Helprin, Digital Barbarism In other words, it's never okay to steal even if you think you have a good reason! www.yayitsandrew.com

Sep 21, 2005, 02:20 PM	#2
TJ- DriverHeaven Extreme Member Join Date: Oct 2004 Location: Infinity Posts: 3,679 Rep Power: 0	i just posted this link in another thread, may as well post it here to http://news.com.com/Symantec+Mozilla...l?tag=nefd.top get opera

Sep 21, 2005, 02:56 PM	#4
Sandok DriverHeaven Extreme Member Join Date: Jul 2004 Posts: 9,472 Rep Power: 0	Oh there are holes in evertyhing and I've never ever been exploited... And I surf dangerously

Sep 21, 2005, 03:19 PM	#5
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	I suspect the most secure browser is probably .... www.offbyone.com - just a shame it will make total mincemeat out of most modern sites! Perhaps both Internet explorer and Mozilla users should consider escaping to the now freeware Opera. Mind you, credit to Mozilla, their response has been fast - are Micro$loth even capable of responding at speed? What were the cancelled "patch tuesday" releases going to be, and whatever it was, I guess we're still vulnerable to it?

Sep 21, 2005, 05:44 PM	#6
EcPercy HardwareHeaven Senior Member Join Date: Jul 2002 Location: Iraq Posts: 1,535 Rep Power: 0	No reason for me to switch. I got the firefox 1.0.7 nightly build last week. What have you compromised on my system??? I have not noticed any malware making it's way onto my system since moving to firefox back when it was still in the .x series. Now with firefox in the 1.x series and closer to 2.x we will see some vast improvements. People are going to find bugs. It is open source software unlike Microsoft where you won't know about a bug until months after it has been out.