Advisory CA-2000-08

CERT Advisory CA-2000-08 Inconsistent Warning Messages in Netscape Navigator Original release date: May 26, 2000 Last Revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator, up to and including Navigator 4.73, withou...

CVE-2000-0517

Netscape 4.73 and earlier does not properly warn users about a potentially invalid certificate if the user has previously accepted the certificate for a different web site, which could allow remote attackers to spoof a legitimate web site by compromising that site's DNS information...

ACROS-2000-04-06-1-PUB

=====BEGIN-ACROS-REPORT===== ========================================================================= ACROS Security Problem Report 2000-04-06-1-PUB ------------------------------------------------------------------------- Bypassing Warnings For Invalid SSL Certificates In Netscape Navigator...

Некорректная работа с SSL-Сертификатами в Netscape

При установке SSL-сенаса Netscape проверяет принадлежность SSL-сертификата по IP адресу, а не по имени сервера. Таким образом можно "перехватить" данные если удасться провести атаку на DNS-сервер...

Advisory CA-2000-05

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2000-05 Netscape Navigator Improperly Validates SSL Sessions Original release date: May 12, 2000 Source: ACROS, CERT/CC A complete revision history is at the end of this file. Systems Affected Systems running Netscape Navigator 4.72, 4.61, and...

Possible symlink problems with Netscape 4.73

It appears that Netscape 4.73 and earlier versions incorrectly creates a temporary file in '/tmp' when importing certificates: ... open"/tmp/tmp3919AA5000A07DC", OWRONLY|OCREAT|OTRUNC, 0666 = 25 fchmod25, 0600 = 0 fstat25, stmode=0,stsize=0, ... = 0 ... Netscape doesn't try to stat/lstat the file...

Проблема символьных линков в Netscape

При создании временого файла с предсказуемым именем для хранения сертификата сервера не проверяется наличие символьного линка. Таким образом может быть перезаписан файл принадлежащий пользователю...

CVE-2000-0406

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability...

Netscape Communicator 4.54.514.64.614.74.724.73 - tmp Symlink

Netscape Communicator 4.54.514.64.614.74.724.73 - tmp Symlink source: https://www.securityfocus.com/bid/1201/info Netscape Communicator version 4.73 and prior may be susceptible to a /tmp file race condition when importing certificates. Netscape creates a /tmp file which is world readable and...

Netscape Communicator 4.5/4.51/4.6/4.61/4.7/4.72/4.73 - '/tmp' Symlink

source: https://www.securityfocus.com/bid/1201/info Netscape Communicator version 4.73 and prior may be susceptible to a /tmp file race condition when importing certificates. Netscape creates a /tmp file which is world readable and writable in /tmp, without calling stat or fstat on the file. As...

Linux news 07.05.00

Linux kernel 2.2.15aa1 Вышла новая и первая версия ядра из серии Linux kernel 2.2.15aaxx. Это ядро предназначено, прежде всего, для больших и мощных серверов с большим объемом RAM. Подробнее: http://linuxtoday.com/stories/21325.html The Real Microsoft Killer: Open File Formats Cтатья обращает...

Уязвимость Cookie в Netscape

JavaScript может быть записан в cookie, и выполнен в контексте локальной машины, что позволяет удаленному пользователю обратиться к локальным файлам...

CVE-1999-0790

A remote attacker can read information from a Netscape user's cache via JavaScript...

CVE-1999-0790

CVE-1999-0790 involves Netscape where a remote attacker can read information from a Netscape user’s cache via JavaScript. Affected software: Netscape browser. Root cause: JavaScript access enables reading cached data, resulting in partial confidentiality impact. Exploitation details, affected ver...

ooo1.txt

ooo1.txt Netscape PublishingXpert 2. file-reading/dir-listing vuln in PSCOErrPage.htm by \x00\x00 0s vuln: SunOS 5.6 and SunOS 5.5.1 others versions affected possibly discription: PSCOErrPage.htm is a error handler message page, when theirs a server error usually you will get fowarded to this alo...

Netscape PSCOErrPage.htm errPagePath Parameter Traversal Arbitrary File Access

The '/PSUser/PSCOErrPage.htm' CGI allows a malicious user to view any file on the target computer by issuing a GET request : GET /PSUser/PSCOErrPage.htm?errPagePath=/file/to/read %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Linux news 8.04.00

Atipa начнет выпуск Linux-компьютеров на базе процессоров Alpha В настоящее время львиная доля Linux-компьютеров работает на базе процессоров Intel. Желая несколько изменить сложившуюся ситуацию, компания Atipa объявила о своем намерении продвигать на рынок Linux-компьютеры на базе процессоров...

Linux news 6.04.00

Обновлен список работ для 2.4 Alan обновил список работ, которые необходимо выполнить для ядра 2.4. Подробнее: http://www.linuxtoday.org/stories/19479.html Kernel Traffic 61 Вышел очередной Kernel Traffic, за номером 61. Подробнее: http://www.linuxtoday.com McAfee VirusScan for Linux...

Netscape PublishingXPert 2.0/2.2/2.5 - Local File Reading

// source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.htm does not sufficiently validate input. A problem with...

Netscape PublishingXPert 2.02.22.5 - Local File Reading

Netscape PublishingXPert 2.02.22.5 - Local File Reading // source: https://www.securityfocus.com/bid/2920/info Netscape PublishingXpert is an e-commerce application distributed by Netscape. PublishingXpert manages user information, sending them special ads and personalized content. PSCOErrPage.ht...