Description
Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.
References
- 19990202 Unsecured server in applets under Netscape mailing-list
- java-socket-open(1727) vdb-entry