1178 matches found
CVE-1999-0790
A remote attacker can read information from a Netscape user's cache via JavaScript...
browser-bug.txt
SET March 2000 http://www.set-ezine.org --- CONTENTS --- - 01 - Introduction - 02 - Oddities - 03 - Conclusions Introduction =-=-=-=-=-=- Browsers under Linux will hang when trying to access certain devices, this bug may be considered similar to the \con\con bug except that the technological...
netscape-wp.dir-list
---------------- ZSH Advisory Netscape WebPublisher Allows Directory Listing and Access March 11, 2000 AD000311-1 ---------------- Brief Description : Netscape Webpublisher is an addon to Netscape's Enterprise webserver which allows remote filemodifications, uploads and downloads. A third party...
Netscape Server ?wp-* Publishing Tags Forced Directory Listing
The version of Netscape Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by using a crafted URL request with special tags such as '?wp-cs-dump' appended, to display a listing of the page directory, whic...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...
Netscape Enterprise Server 3.0/3.6/3.51 - Directory Indexing
// source: https://www.securityfocus.com/bid/1063/info Netscape Enterprise Server 3.x includes a poorly documented feature that will allow remote users to view directory listings by appending various instructional tags to the URL. Although it can be disabled, Netscape Enterprise Server is shipped...
Netscape Enterprise Server 3.03.63.51 - Directory Indexing
Netscape Enterprise Server 3.03.63.51 - Directory Indexing // source: https://www.securityfocus.com/bid/1063/info Netscape Enterprise Server 3.x includes a poorly documented feature that will allow remote users to view directory listings by appending various instructional tags to the URL. Althoug...
CVE-2000-0237
Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories...
iplanet.dos.txt
Hello, I could find out the denial of service effected to iPlanet Web Server, Enterprise Edition 4.1 on Linux 2.2.5Redhat6.1J; Kernel 2.2.12. When I tried to send the request "GET" of seven hundred times your product consumed all memory resouce and karnel paniced. The size of GET command to your...
CVE-1999-1002
Netscape Navigator uses weak encryption for storing a user's Netscape mail password...
CVE-1999-0537
A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc...
CVE-1999-1002
CVE-1999-1002 affects Netscape Navigator: weak encryption used to store a user's Netscape mail password, leading to partial confidentiality impact. The CVSS base score is 5.0 (MEDIUM) with network attack vector and no authentication required; exploitation details are not provided in the linked do...
CVE-1999-0853
CVE-1999-0853 corresponds to a buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server that can allow a remote attacker to gain privileges through the HTTP Basic Authentication mechanism. Connected OpenVAS/Nessus entries identify affected products as Netscape Enterprise Server...
CVE-1999-0853
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure...
CVE-1999-1002
Netscape Navigator uses weak encryption for storing a user's Netscape mail password...
CVE-2000-0087
Netscape Mail Notification nsnotify utility in Netscape Communicator uses IMAP without SSL, even if the user has set a preference for Communicator to use an SSL connection, allowing a remote attacker to sniff usernames and passwords in plaintext...
CVE-1999-0809
Netscape Communicator 4.x with Javascript enabled does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating from the same server as the page being viewed"...
CVE-1999-0751
CVE-1999-0751 : Buffer overflow in the Accept command of Netscape Enterprise Server 3.6 with the SSL Handshake Patch. The issue is remote and related to the Accept header/argument length, potentially allowing code execution on the remote system and impacting availability. Affected product: Netsca...
CVE-1999-0686
CVE-1999-0686 affects Netscape Enterprise Server (NES) within HP Virtual Vault (VVOS). The vulnerability is a denial-of-service triggered by a long URL. The available sources (NVD, Red Hat, CVE list) describe a DoS impact with partial availability but do not provide concrete root-cause details, a...