netscape_ssl_bug.txt

Subject: Netscape Enterprise Server SSL Handshake Bug To: [email protected] Hi everybody, There exists a SSL handshake bug in Netscape Enterprise Server that can be exploited to crash the server. Netscape has confirmed this, and they also told me that another person reported this to them...

CVE-1999-0751

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...

Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow

Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrar...

Netscape Enterprise Server 3.51/3.6 SP2 - Accept Buffer Overflow

source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrary commands on the webserver. GET / HTTP/1.0 Accept:...

Netscape Enterprise Server SSL Handshake DoS

There is an SSL handshake bug in the remote secure web server that could lead to a denial of service attack. An attacker may use this flaw to prevent your site from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-1999-0752

Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake...

PT-1999-1328 · Netscape · Netscape Enterprise Server

Name of the Vulnerable Software and Affected Versions: Netscape Enterprise Server affected versions not specified Description: The issue is related to a denial of service in Netscape Enterprise Server. This occurs due to a buffer overflow in the SSL handshake. Recommendations: At the moment, ther...

Netscape Enterprise Server 3.6 - SSL Buffer Overflow (Denial of Service) (PoC)

/ source: https://www.securityfocus.com/bid/516/info Netscape's Enterprise Server suffers from a buffer overflow error in the SSL handshaking code that causes it to crash when the buffer is overrun. / // // nesexploit.c - v1.02 - by Arne Vidstrom, [email protected] // // This program crashes...

CVE-1999-0531

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...

CVE-1999-0601

A network intrusion detection system IDS does not properly handle data within TCP handshake packets...

PT-1999-1219 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: A network intrusion detection system IDS does not properly handle data within TCP handshake packets. Recommendations: At the moment, there is no information about a newer version th...

PT-2014-9091

Name of the Vulnerable Software and Affected Versions OpenSSL versions prior to 0.9.8za OpenSSL versions prior to 1.0.0m OpenSSL versions prior to 1.0.1h Description The issue exists due to incorrect restriction of ChangeCipherSpec message processing in OpenSSL, allowing a man-in-the-middle...