7608 matches found
CVE-1999-0853
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure...
CVE-1999-0436
Domain Enterprise Server Management System DESMS in HP-UX allows local users to gain privileges...
CVE-1999-0479
Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems...
netscape_ssl_bug.txt
Subject: Netscape Enterprise Server SSL Handshake Bug To: [email protected] Hi everybody, There exists a SSL handshake bug in Netscape Enterprise Server that can be exploited to crash the server. Netscape has confirmed this, and they also told me that another person reported this to them...
enterprise3.6.txt
From: Nobuo Miwa Subject: Accept overflow on Netscape Enterprise Server 3.6 SP2 Hi, I found a vulnerability in "Enterprise 3.6 SP 2 SSL Handshake fix".. I sent a malformed URL to the server and its service was dead. Its URL is following... GET / HTTP/1.0 Accept: aaaaaaaaaaaaaa...2000byte/gif...
CVE-1999-0751
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...
Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow
Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrar...
Netscape Enterprise Server 3.51/3.6 SP2 - Accept Buffer Overflow
source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrary commands on the webserver. GET / HTTP/1.0 Accept:...
Netscape Enterprise Server Accept Header Remote Overflow
The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...
Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET
Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be...
Netscape Enterprise Server 3.6 SP2/FastTrack Server 2.0.1 - GET
source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be executed remotely at this point. Netscape Enterprise Server 3.5...
netscape-enterprise-pageservices.txt
Date: Mon, 12 Oct 1998 13:20:11 +0200 From: Jorgen Smith To: [email protected] Subject: PageServices bug in Netscape Enterprise server Hi, Just in case it has not already been reported my guess is that it has, and that a lid is put on this till Netscape works it out, I just receive...
CVE-1999-1130
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file...
Netscape Enterprise Server 3.513.6 - JHTML View Source
Netscape Enterprise Server 3.513.6 - JHTML View Source source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or...
Netscape Enterprise Server 3.51/3.6 - JHTML View Source
source: https://www.securityfocus.com/bid/559/info Netscape Enterprise Server 3.51 and above includes a search engine by default. The results it generates can be tailored using various configuration files, and one of the options is whether or not the full text of a resultant page is displayed. Th...
Netscape Enterprise Server SSL Handshake DoS
There is an SSL handshake bug in the remote secure web server that could lead to a denial of service attack. An attacker may use this flaw to prevent your site from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-1999-0752
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake...
Netscape Enterprise Server 3.6 - SSL Buffer Overflow (Denial of Service) (PoC)
Netscape Enterprise Server 3.6 - SSL Buffer Overflow Denial of Service PoC / source: https://www.securityfocus.com/bid/516/info Netscape's Enterprise Server suffers from a buffer overflow error in the SSL handshaking code that causes it to crash when the buffer is overrun. / // // nesexploit.c -...
PT-1999-1328 · Netscape · Netscape Enterprise Server
Name of the Vulnerable Software and Affected Versions: Netscape Enterprise Server affected versions not specified Description: The issue is related to a denial of service in Netscape Enterprise Server. This occurs due to a buffer overflow in the SSL handshake. Recommendations: At the moment, ther...