• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Netscape 'document.referrer' User Information Disclosure Vulnerability

Bugtraq ID:	2824
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 28 1998 12:00AM
Updated:	Mar 28 1998 12:00AM
Credit:	Originally discovered and posted to Bugtraq by Rop Gonggrijp <rop@itsx.com> on March 28, 1998. Rediscovered by 3APA3A <3APA3A@SECURITY.NNOV.RU> on May 30, 2001 and posted to Bugtraq on June 5, 2001.
Vulnerable:	Netscape Communicator 4.77 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 - Conectiva Linux 3.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 + SGI IRIX 6.5.13 Netscape Communicator 4.76 - Caldera OpenLinux 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 - Conectiva Linux 3.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 Netscape Communicator 4.75 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 - Conectiva Linux 3.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 + SGI IRIX 6.5.12 + SGI IRIX 6.5.11 Netscape Communicator 4.74 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 - Conectiva Linux 3.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 Netscape Communicator 4.73 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 es - Conectiva Linux 4.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 Netscape Communicator 4.72 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - Conectiva Linux 4.0 es - Conectiva Linux 4.0 - MandrakeSoft Linux Mandrake 7.1 - MandrakeSoft Linux Mandrake 7.0 - MandrakeSoft Linux Mandrake 6.1 - MandrakeSoft Linux Mandrake 6.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3 Netscape Communicator 4.7 - Caldera OpenLinux Desktop 2.3 - Caldera OpenLinux eBuilder 3.0 - Conectiva Linux 5.1 - Conectiva Linux 5.0 - Conectiva Linux 4.2 - Conectiva Linux 4.1 - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.1.1 - FreeBSD FreeBSD 4.1 - FreeBSD FreeBSD 4.0 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - RedHat Linux 6.2 sparc - RedHat Linux 6.2 i386 - RedHat Linux 6.2 alpha - RedHat Linux 6.1 sparc - RedHat Linux 6.1 i386 - RedHat Linux 6.1 alpha - RedHat Linux 6.0 sparc - RedHat Linux 6.0 alpha - RedHat Linux 6.0 - RedHat Linux 5.2 sparc - RedHat Linux 5.2 i386 - RedHat Linux 5.2 alpha - S.u.S.E. Linux 7.0 - SCO eDesktop 2.4 - SCO eServer 2.3
Not Vulnerable: