

The help system that accompanies Netscape's email client states theįollowing, under the section "Using Netscape Mail -> Deleting Messages":

Messages from a mailbox file, and dump them as sepparate. Simple file-parsing VBScript is all that is needed to extract all individual Recovery of messages not permanently removed by compacting is trivial.

The deleted messages are permanently removed. Which contained the deleted email message (and not the trash folder!), that It is only when the user chooses to compact the folder The deletedĮmail messages are marked for removal in the status file which accompanies Permanently remove the contents of the trash folder, recycle bin, orĪppropriate substitute. In most instances of Windows-based applications, this action would Right-click on this folder and select 'Empty trash' from the popup menu. Within the email client, it is sent to the 'Trash' folder. When a user deletes an email message from, for example, his inbox folder Used to save the status of each individual message contained in the mailbox Which are basically sequentially written ASCII text files. Netscape's email client stores received email messages in mailbox files, Netscape/7.0 (from the About Netscape window) Users having large quantities of email messages, which they would think ofĪs permanently deleted, still stored in clear text on their hard disks. To permanently delete email messages is not explained, which could lead to The method that the email client utilizes Netscape 7.0 includes, as part of it's release, an email client, capable of Potential disclosure of sensitive information in Netscape 7.0 email client. Subject: Potential disclosure of sensitive information in Netscape 7.0 email client Solution: No solution was available at the time of this entry. Impact: A local user may be able to view a message that the target user thought had been deleted. When the user selects 'Empty Trash', the message is not removed from the Trash file until that folder is compressed by the user. It is reported that when a user deletes a message, the message is moved to the Trash folder. The software does not delete e-mail messages when the user selects 'Empty Trash'. Netscape E-mail Client Fails to Delete Messages When 'Empty Trash' is SelectedĬVE Reference: GENERIC-MAP-NOMATCH (Links to External Site)ĭescription: A potential information disclosure vulnerability was reported in the Netscape 7.0 e-mail client.

I know some of you use this so i thought i should post this so you know about it
