Cool. I do not think it has Java running in KFM by default. I am not sure 
though. Well you should have checked it out in the Netscape browser so you 
could see what it did.. But if you do a
root@localhost>killall -9 X(Provided by Axalon)
That will kill them. Also I think I may have found a way that Java can be used 
to spawn off many processes so that you may not even be able to run a simple 
command at the line. I saw a article about it in the Linux Magazine. I then 
noticed a possible hole in Linux Netscape browser that may allow command to be 
run without any root access. Do not know though. I am going to try to run it on 
myself. I will let the Linux community know..

James J. Capone
=======================
Webmaster http://linuxuser.8m.com
Asst. Webmaster http://www.ptm.com
Co-Author - Linux Book For Newbies.
"The Only Person To Hear Both Sides Of A Argument Is The Guy In The Apartment 
Next To Yours!"


-----Original Message-----
From:   Civileme [SMTP:[EMAIL PROTECTED]]
Sent:   Monday, July 12, 1999 5:13 AM
To:     [EMAIL PROTECTED]
Subject:        Re: [newbie] Exploit in Java for Netscape

"James J. Capone" wrote:

> I found a Exploit in All Internet browsers that support Java. The only way 
this
> works is to have Java Running..
>
> Here it is though:

Hmmmm

Well, there are some nice exploits at www.insecure.org, too.

I managed to avoid it with kfm.  I don't know if kfm had java running or not.

Civileme

Reply via email to