1249 matches found
CVE-2001-0847
Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via 1 URL encoding the request, or 2 directly requesting the ReplicaID...
nn45-overflow.txt
This is a multi-part message in MIME format. ------=NextPart000001701BF4C70.00D57320 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Netscape Navigator/Communicator 4.5 buffer overflow advisory...
Lotus Domino Default Navigator Protection By-pass (#NISR29102001B)
NGSSoftware Insight Security Research Advisory Name: Lotus Domino Default Navigator Protection By-pass Systems Affected: Lotus Domino Web Server 5.x on all operating systems Severity: Low Vendor URL: http://www.lotus.com/ Author: David Litchfield [email protected] Date: 29th October 2001 Adviso...
Netscape 4.76 gif comment flaw
Product: Netscape Navigator/Communicator Tested on: 4.76 on Linux and Win98/NT Vendor Contact: Reported 2001-03-22 Problem -------------------------------------------------------- - Overview: The Netscape browser does not escape the gif file comment in the image information page. This allows...
Netscape Navigator 4.0.8 - about: Domain Information Disclosure
Netscape Navigator 4.0.8 - about: Domain Information Disclosure source: https://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment...
Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure
source: https://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment field, it is treated like a normal HTML page. The Javascript code...
CVE-2000-0676
CVE-2000-0676 affects Netscape Communicator/Navigator 4.04–4.74. An unsigned Java applet could read local files (e.g., file://) and connect to remote resources via file/http/https/ftp URLs, enabling data exfiltration via Brown Orifice. Root cause is an implementation error in the JRE bundled with...
Netscape Navigator buffer overflow
Haven't seen bugreport on it, so I decided to publish this vulnerability. In fact it's pretty old, but still unpublished: Netscape Navigator is vulnerable to trivial, remote buffer overflow attack when viewing prepared html: form action=something method=something input type=password...
netscape.overflow.txt
----- Forwarded message from Michal Zalewski ----- Approved-By: [email protected] Delivered-To: [email protected] Delivered-To: [email protected] X-Hate: Where do you want to go to die? Date: Thu, 28 Sep 2000 18:45:41 +0200 Reply-To: Michal Zalewski From: Michal...
[SECURITY] New version of Netscape Communicator/Navigator released
---------------------------------------------------------------------------- Debian Security Advisory [email protected] http://www.debian.org/security/ Michael Stone September 1, 2000 - ---------------------------------------------------------------------------- Package: netscape communicator,...
JDK 1.1.x Listening Socket Vulnerability (was Re: BrownOrifice can break firewalls!)
On Sat, 12 Aug 2000 05:33:29 +0900 "TAKAGI, Hiromitsu" [email protected] wrote: This can be verified by trying the following refined proof of concept Applet. http://java-house.etl.go.jp/takagi/java/test/Brumleve-BrownOrifice-modified-netscape.net.URLConnection/Test.html I have confirmed that Mac O...
bohttpd.vulnerability.txt
===================================================== Brown Orifice HTTPD Directory Traversal Vulnerability ===================================================== Background ---------- Brown Orifice HTTPD BOHTTPD is "a web server and file sharing tool" that runs as a Java Applet in Netscape...
Internet Security Systems Security Alert: Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape
-----BEGIN PGP SIGNED MESSAGE----- Internet Security Systems Security Alert August 7, 2000 Brown Orifice, BOHTTPD, a Platform Independent Java Vulnerability in Netscape Synopsis: On August 5th, code was made public by Dan Brumleve, which demonstrates a serious security hole in the Netscape Java...
CVE-2000-0406
The CVE-2000-0406 entry describes: Netscape Communicator before 4.73 and Navigator 4.07 do not properly validate SSL certificates, enabling remote attackers to redirect traffic to a malicious server (Acros-Suencksen SSL) and potentially steal data. No remediation or exploit details are provided i...
CVE-1999-0142
The CVE-1999-0142 issue concerns the Java Applet Security Manager in Netscape Navigator 2.0 and Java Developer’s Kit 1.0, where an applet could connect to arbitrary hosts due to how the security manager operates. Affected software/components are the Java Applet Security Manager implementation wit...
CVE-1999-0142
The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...
Advisory CA-2000-08
CERT Advisory CA-2000-08 Inconsistent Warning Messages in Netscape Navigator Original release date: May 26, 2000 Last Revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator, up to and including Navigator 4.73, withou...
ACROS-2000-04-06-1-PUB
=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-04-06-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Netscape Navigator...
Advisory CA-2000-05
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2000-05 Netscape Navigator Improperly Validates SSL Sessions Original release date: May 12, 2000 Source: ACROS, CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator 4.72, 4.61, and...