CVE-1999-0239

Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET...

CVE-1999-0424

The CVE-1999-0424 entry concerns Netscape 4.5’s talkback feature, allowing a local user to overwrite arbitrary files of another user when Netscape crashes. Affected software: Netscape 4.5; Vulnerable component/behavior: talkback causing local file overwrite after crash. Impact: partial confidenti...

CVE-1999-0425

talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes...

CVE-1999-0479

Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems...

netscape_ssl_bug.txt

Subject: Netscape Enterprise Server SSL Handshake Bug To: [email protected] Hi everybody, There exists a SSL handshake bug in Netscape Enterprise Server that can be exploited to crash the server. Netscape has confirmed this, and they also told me that another person reported this to them...

enterprise3.6.txt

From: Nobuo Miwa Subject: Accept overflow on Netscape Enterprise Server 3.6 SP2 Hi, I found a vulnerability in "Enterprise 3.6 SP 2 SSL Handshake fix".. I sent a malformed URL to the server and its service was dead. Its URL is following... GET / HTTP/1.0 Accept: aaaaaaaaaaaaaa...2000byte/gif...

netscape4.x_bof.txt

Subject: Re: Netscape communicator 4.06J, 4.5J-4.6J, 4.61e Buffer Overflow To: [email protected] Hello David Parker$B!!Bwrites: I tried the 4 exploit test links, and they all crashed Netscape but didn't cause any bluescreens or run any programs. I have win98, Netscape 4.5 128-bit, and the...

CVE-1999-0751

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch...

Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow

Netscape Enterprise Server 3.513.6 SP2 - Accept Buffer Overflow source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrar...

Microsoft Internet Explorer 5 / Netscape Communicator 4.0/4.5/4.6 - JavaScript STYLE

Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Netscape Communicator 4.0/4.5/4.6 Javascript STYLE Vulnerability source: https://www.securityfocus.com/bid/630/info The HTML STYLE command can be used to embed Javascript into Hotmail email messages. The STYLE tag...

Netscape Enterprise Server 3.51/3.6 SP2 - Accept Buffer Overflow

source: https://www.securityfocus.com/bid/631/info Enterprise Server 3.6 SP2 with the SSL Handshake Patch applied is vulnerable to a buffer overflow that may allow attackers to launch denial-of-service attacks and to execute arbitrary commands on the webserver. GET / HTTP/1.0 Accept:...

Microsoft Internet Explorer 5 Netscape Communicator 4.04.54.6 - JavaScript STYLE

Microsoft Internet Explorer 5 Netscape Communicator 4.04.54.6 - JavaScript STYLE Microsoft Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Netscape Communicator 4.0/4.5/4.6 Javascript STYLE Vulnerability source: https://www.securityfocus.com/bid/630/info The HTML STYLE...

Netscape Enterprise Server Accept Header Remote Overflow

The remote web server seems to crash when it is issued a too long argument to the 'Accept:' command : Example : GET / HTTP/1.0 Accept: /gif This may allow an attacker to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10154...

CVE-1999-0685

Buffer overflow in Netscape Communicator via EMBED tags in the pluginspage option...

Netscape Communicator 4.064.54.64.514.61 - EMBED Buffer Overflow

Netscape Communicator 4.064.54.64.514.61 - EMBED Buffer Overflow / source: https://www.securityfocus.com/bid/618/info In several versions of Netscape Communicator, there is an unchecked buffer in the code that handles EMBED tags. The buffer is in the 'plugins page' option. This vulnerability can ...

Netscape Communicator 4.06/4.5/4.6/4.51/4.61 - EMBED Buffer Overflow

/ source: https://www.securityfocus.com/bid/618/info In several versions of Netscape Communicator, there is an unchecked buffer in the code that handles EMBED tags. The buffer is in the 'plugins page' option. This vulnerability can be exploited by a malicious webpage. / // /Netscape communicator...

Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET

Netscape Enterprise Server 3.6 SP2FastTrack Server 2.0.1 - GET source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be...

Netscape Enterprise Server 3.6 SP2/FastTrack Server 2.0.1 - GET

source: https://www.securityfocus.com/bid/1024/info A GET request containing over 4080 characters will cause the httpd.exe process to crash within Netscape Enterprise Server 3.6, resulting in a Dr. Watson error. Arbitrary code can be executed remotely at this point. Netscape Enterprise Server 3.5...

netscape4.5-nsform.tmp.txt

02-FEB-99 - http://www.skylab.org/netscape/index.html Yet another browser bug was found late last week. This time in Netscape's Communicator 4.5. The problem appears with the way Netscape handles forms. In many cases, the browser will store data entered on a FORM in C:\WINDOWS\TEMP in a NSFORM.TM...

netscapemail.txt

Date: Wed, 29 Jul 1998 10:04:05 +0200 From: Paul Boehm Subject: Re: netscape mail overflowanother one On Tue, Jul 28, 1998 at 08:21:41PM +0200, Paul Boehm wrote: Hi, netscape mail crashes when trying to the attachment ^- save from the following pseudo mime mail: sorry for posting twice, but this ...