Bug 23658

Summary: Netscape messanger can not handle \000 symbols in a message
Product: [Retired] Red Hat Linux Reporter: Need Real Name <mal>
Component: netscapeAssignee: Bill Nottingham <notting>
Status: CLOSED WONTFIX QA Contact: David Lawrence <dkl>
Severity: medium Docs Contact:
Priority: medium    
Version: 7.0CC: rvokal
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-01-09 16:18:11 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Need Real Name 2001-01-09 16:17:51 UTC
Netscape messanger can not handle \000 symbols in a message.
It either hangs, or, sometimes spits a garbage in a message body.
This probably a security problem because some internal memory
can be inappropriately accessed.

The problem was identified when netscape-messanger was used with 
a imapd server.
See http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=20858

Comment 1 Bill Nottingham 2001-01-09 16:25:33 UTC
As we don't have the source to netscape, this is not something that we can fix.
We suggest you report this to Netscape at:

http://help.netscape.com/forms/bug-client.html



Comment 2 Need Real Name 2001-01-09 16:34:41 UTC
I submitted a bug report to them,
so they may(or may not) fix this problem.
Then do not even have the latest version of netscape in version menu.
The report which I submitted  to them is below:

---------------------------------------
From: mal
Subject: 4.72 - Unix: x86 Linux (RedHat 7.0) - Netscape messanger can not handle
\000 symbols in a message.

   Submitter name:                Vladislav Malyshkin
   Submitter email address:       mal
   Acknowledgement checkbox:      on
   Product:                       Communicator
   Version:                       4.72
   Operating system:              Unix: x86 Linux
   OS version:                    RedHat 7.0
   Browser_type:                  Other
   Issue summary:                 Netscape messanger can not handle \000 symbols
in a message.

Issue details:
The netscape
netscape-common-4.76-1
netscape-communicator-4.76-1
From RedHat 7.0 can not handle \000 symbols in a
message.
It either hangs, or, sometimes spits a garbage in
a message body.
This probably a security problem because some
internal memory
 can be inappropriately accessed.
 The problem was identified when
netscape-messanger was used with a imapd server.

See
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=23658
for original bug report.

   Severity:                      Something didn't work right
   Can reproduce?:                Yes, Always
   Try this URL:                 
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=23658

Additional computer info:
Standard RedHat 7.0 with all update patches
applied.


This form was submitted from http://help.netscape.com/forms/bug-client.html
with Mozilla/4.76 [en] (X11; U; Linux 2.2.16-22 i686).