1178 matches found
PT-1999-1365 · Netscape · Netscape Communicator
Name of the Vulnerable Software and Affected Versions: Netscape Communicator version 4.x Description: The issue concerns Netscape Communicator 4.x with Javascript enabled, where it does not warn a user of cookie settings, even if they have selected the option to "Only accept cookies originating...
Netscape Enterprise Server SSL Handshake DoS
There is an SSL handshake bug in the remote secure web server that could lead to a denial of service attack. An attacker may use this flaw to prevent your site from working properly. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-1999-0752
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake...
Netscape Enterprise Server 3.6 - SSL Buffer Overflow (Denial of Service) (PoC)
Netscape Enterprise Server 3.6 - SSL Buffer Overflow Denial of Service PoC / source: https://www.securityfocus.com/bid/516/info Netscape's Enterprise Server suffers from a buffer overflow error in the SSL handshaking code that causes it to crash when the buffer is overrun. / // // nesexploit.c -...
Netscape Enterprise Server 3.6 - SSL Buffer Overflow (Denial of Service) (PoC)
/ source: https://www.securityfocus.com/bid/516/info Netscape's Enterprise Server suffers from a buffer overflow error in the SSL handshaking code that causes it to crash when the buffer is overrun. / // // nesexploit.c - v1.02 - by Arne Vidstrom, [email protected] // // This program crashes...
PT-1999-1328 · Netscape · Netscape Enterprise Server
Name of the Vulnerable Software and Affected Versions: Netscape Enterprise Server affected versions not specified Description: The issue is related to a denial of service in Netscape Enterprise Server. This occurs due to a buffer overflow in the SSL handshake. Recommendations: At the moment, ther...
Netscape FastTrack get Command Forced Directory Listing
When the remote web server is issued a request with a lower-case 'get', it will return a directory listing even if a default page such as index.html is present. For example : get / HTTP/1.0 will return a listing of the root directory. This allows an attacker to gain valuable information about the...
Netscape Server ?PageServices Request Forced Directory Listing
The version of Netscape Server running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, by using a crafted URL request with '?PageServices' appended, to display a listing of the page directory, which may contain...
Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing
Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing source: https://www.securityfocus.com/bid/481/info Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met: 1: Directory listing is enabled 2: No filename is specified in the...
Netscape FastTrack Server 3.0.1 - Fasttrack Root Directory Listing
source: https://www.securityfocus.com/bid/481/info Netscape's Fasttrack server is supposed to display a directory listing if the follwing three conditions are met: 1: Directory listing is enabled 2: No filename is specified in the requested URL 3: There is no index file in that directory defaults...
CVE-1999-0762
When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information...
PT-1999-1333 · Netscape · Netscape Communicator
Name of the Vulnerable Software and Affected Versions: Netscape Communicator affected versions not specified Description: The issue allows a remote attacker to gain access to browser information when Javascript is embedded within the TITLE tag, utilizing the "about" protocol. Recommendations: At...
CVE-1999-0686
Denial of service in Netscape Enterprise Server NES in HP Virtual Vault VVOS via a long URL...
CVE-1999-0807
The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users...
PT-1999-1363 · Netscape · Netscape Directory Server
Name of the Vulnerable Software and Affected Versions: Netscape Directory Server affected versions not specified Description: The installation procedure of the Netscape Directory Server leaves sensitive information in a file that is accessible to local users. Recommendations: At the moment, there...
CVE-1999-0425
talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes...
CVE-1999-0424
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes...
PT-1999-1108 · Netscape · Netscape
Name of the Vulnerable Software and Affected Versions: Netscape version 4.5 Description: The issue allows a local user to overwrite arbitrary files of another user whose Netscape crashes. This is related to the talkback feature in Netscape. Recommendations: For Netscape version 4.5, consider...
PT-1999-1109 · Netscape · Netscape
Name of the Vulnerable Software and Affected Versions: Netscape version 4.5 Description: A local user can kill an arbitrary process of another user whose Netscape crashes due to the talkback feature in Netscape. Recommendations: For Netscape version 4.5, consider disabling the talkback feature to...