7608 matches found
CVE-2001-0251
The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command...
CVE-2001-0250
CVE-2001-0250 : The vulnerability affects the Web Publishing feature of Netscape Enterprise Server (version 4.x and earlier). A remote attacker can trigger an arbitrary directory listing by sending the INDEX command to the web server, exposing internal site structure. Impact is information disclo...
CVE-2001-0251
CVE-2001-0251 affects Netscape Enterprise Server 3.x via the Web Publishing feature. The vulnerability allows remote attackers to cause a denial-of-service by sending the REVLOG command. The connected documents corroborate the issue across multiple sources (NVD entry, CVE record, and EUVD referen...
CVE-2001-0250
The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command...
Netscape.Publisher.ACL.txt
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Проблемы с разрешениями в Netscape Enterprise Server
В установке по-умолчанию большое число "слабых" разрешений, которык могут привести к компрометации сервера в компоненте "Web Publisher"...
Netscape E.S. Web Publisher ACL Vulnerabilities
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
defcom.netscape-enterprise.txt
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Command Execution
!/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingreslock stream tcp nowait root /bin/sh sh -i' /tmp/bob; /usr/sbin/inetd -s...
Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution
Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingresloc...
Yet Another IBM WebSphere Showcode Vulerability
Summary: When IBM WebSphere application server shares the same document root as Netscape Enterprise server it is possible for a malicious user to view to view the source of any JSP file in the document root. WebSphere's plugin for Netscape Enterprise server uses the host header sent from the clie...
DoS против Netscape Enterprise Server
Запрос с большим количеством "/.." приводит к краху сервера. Кроме того сервер неадекватно реагирует на запросы REVLOG и INDEX...
[SAFER] Security Bulletin 010125.DOS.1.5
S.A.F.E.R. Security Bulletin 010125.DOS.1.5 TITLE : Netscape Enterprise Server - REVLOG request problem DATE : January 25, 2001 NATURE : Denial-of-Service AFFECTED : Netscape Enterprise Server 3.x with Web Publishing enabled PROBLEM: Problems exists that allows remote user to crash Netscape...
[SAFER] Security Bulletin 010124.EXP.1.11
S.A.F.E.R. Security Bulletin 010124.EXP.1.11 TITLE : Netscape Enterprise Server - INDEX request problem DATE : January 24, 2001 NATURE : Information gathering AFFECTED : Netscape Enterprise Server 3.x and 4.x with Web Publishing enabled PROBLEM: Problems exists that allows remote user to obtain...
Netscape Enterprise Server 3.0/4.0 - 'Index' Disclosure
source: https://www.securityfocus.com/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request. INDEX / HTTP/1.0...
Netscape Enterprise Server 3.04.0 - Index Disclosure
Netscape Enterprise Server 3.04.0 - Index Disclosure source: https://www.securityfocus.com/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request. INDEX / HTTP/1.0...
def-2001-04: Netscape Enterprise Server Dot-DoS
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
Netscape Enterprise Server DoS Vulnerability
Description A specially crafted GET request composed of approx 1344 '../', will cause Netscape Enterprise Server to stop responding. A restart of the server service is required in order to gain normal functionality. Technologies Affected Netscape Enterprise Server 4.1.0 SP5 Currently the...
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 Remote Exploit
Exploit for solaris platform in category remote exploits ============================================================= Netscape Enterprise Server 4.0/sparc/SunOS 5.7 Remote Exploit ============================================================= !/usr/bin/perl Remote sploit for Netscape Enterprise...
CVE-2000-0237
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories...