CVE-2000-1187
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.1%
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| netscape:communicator | netscape communicator | le | 4.75 |
| netscape:navigator | netscape navigator | le | 4.75 |
References
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344
lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html
marc.info/?l=bugtraq&m=97500270012529&w=2
www.osvdb.org/7207
www.redhat.com/support/errata/RHSA-2000-109.html
exchange.xforce.ibmcloud.com/vulnerabilities/5542
Related
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.9 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
83.1%