CVE-2009-2542: Undefined Security Weakness

Netscape 6 and 8 allows remote attackers to cause a denial of service memory consumption via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2002-0594

CVE-2002-0594 affects Netscape 6 and Mozilla 1.0 RC1 and earlier. A CSS LINK element that triggers an HTTP redirect can let remote attackers determine the existence of local files, exposing partial confidentiality. The CVSS v2 base score is 5.0 (Network, Low complexity, No user interaction). Red ...

CVE-2002-0594: Undefined Security Weakness

Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...

CVE-2002-0593

CVE-2002-0593: A buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier can be triggered by a long channel name in an IRC URI, allowing remote DoS and possibly arbitrary code execution. Affected software is Netscape 6 and Mozilla 1.0 RC1 and earlier; the underlying issue is a buffer overfl...

CVE-2002-0593: Undefined Security Weakness

Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long channel name in an IRC URI...

RE: Reading local files in Netscape 6 and Mozilla (GM#001-NS)

Disturbing. Netscape sure must be in financial problems since they are selling out on their users security for a lousy $1000. I know for one that I personally will release any future Netscape advisories with full public disclosure and without prior Netscape notification. As a matter of fact, why...

Security Bulletin #00208

Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00208 Date: October 22, 2001 Cross-Ref: Title: Swing The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the information contained in this Security Bulleti...

Dangerous temp file creation during installation of Netscape 6.

During installation of Netscape 6.01a for Solaris 2.7/8 Sparc, I noticed the file /tmp/admin.3842 was created with mode 644. As you already know if this package is installed by root in multiuser mode a malicious user could use this to overwrite system files etc.. Here is the dangerous code: grep...

Символьные линки в Netscape 6 (symbolic link)

Создается временный файл с предсказуемым именем без проверки символьных линков...

Дырки в Netscape 6

Несколько переполнений буфера...

Linux news 8.04.00

Atipa начнет выпуск Linux-компьютеров на базе процессоров Alpha В настоящее время львиная доля Linux-компьютеров работает на базе процессоров Intel. Желая несколько изменить сложившуюся ситуацию, компания Atipa объявила о своем намерении продвигать на рынок Linux-компьютеры на базе процессоров...