Description
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet (CSS) page that causes an HTTP redirect.
References
- CLA-2002:490 vendor-advisory
- 20020430 RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS) mailing-list
- mozilla-css-files-exist(8977) vdb-entry
- RHSA-2003:046 vendor-advisory
- 4640 vdb-entry
- RHSA-2002:192 vendor-advisory