1178 matches found
Netscape Communicator 4.5 - prefs.js Buffer Overflow
// source: https://www.securityfocus.com/bid/893/info Netscape Communicator 4.5 has an unchecked buffer, through which code can be injected for execution via the prefs.js preferences file. This could be exploited locally to run arbitrary code at the privilege level of the current user. The buffer...
PT-1999-1440 · Netscape · Netscape Communicator
Name of the Vulnerable Software and Affected Versions: Netscape Communicator versions prior to 4.7 Description: The issue is related to a buffer overflow that can occur in Netscape Communicator when handling a dynamic font. Specifically, the problem arises when the length field of the font is les...
CVE-2000-0034
Netscape 4.7 records user passwords in the preferences.js file during an IMAP or POP session, even if the user has not enabled "remember passwords."...
PT-1999-1842 · Netscape · Netscape
Name of the Vulnerable Software and Affected Versions: Netscape version 4.7 Description: The issue concerns the storage of user passwords in the preferences.js file during email sessions. Specifically, when using IMAP or POP, user passwords are recorded, regardless of the "remember passwords"...
Netscape Enterprise Server Novell Groupwise 5.25.5 - GWWEB.EXE Multiple Vulnerabilities
Netscape Enterprise Server Novell Groupwise 5.25.5 - GWWEB.EXE Multiple Vulnerabilities Netscape Enterprise Server for NetWare 4/5 3.0.7 a,Novell Groupwise 5.2/5.5 GWWEB.EXE Multiple Vulnerabilities source: https://www.securityfocus.com/bid/879/info The HELP function in GWWEB.EXE will reveal the...
netscape.msredir.txt
The first version of this document was created by Georgi Guninski, i would like to report that this bug also works on netscape Tested 4.7. I added the document with needed changes for netscape. Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The...
CVE-1999-0853
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure...
netscape.4.x.java.txt
Netscape 4.x javascript security flaw Versions tested: Windows98/Netscape4.7,Windows95/Netscape4.05 Description: Credits to Henri Torgemane Netscape has a "persistent" navigator object, which means that any data put in the window.navigator object will be accessible to every other window as long a...
CVE-1999-1189
Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file...
CVE-1999-1532
Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service memory exhaustion via a series of long RCPT TO commands...
CVE-1999-1226
Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key...
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service
Netscape Messaging Server 3.63.543.55 - RCPT TO Denial of Service // source: https://www.securityfocus.com/bid/748/info Netscape Messaging server will not de-allocate memory that is used to store the RCPT TO information for an incoming email. By sending enough long RCPT TO addresses, the system c...
Netscape Messaging Server 3.6/3.54/3.55 - 'RCPT TO' Denial of Service
// source: https://www.securityfocus.com/bid/748/info Netscape Messaging server will not de-allocate memory that is used to store the RCPT TO information for an incoming email. By sending enough long RCPT TO addresses, the system can be forced to consume all available memory, leading to a denial ...
CVE-1999-1357
Netscape Communicator 4.04 through 4.7 and possibly other versions in various UNIX operating systems converts the 0x8b character to a "" sign, which could allow remote attackers to attack other clients via cross-site scripting CSS in CGI programs that do not filter these characters...
CVE-1999-0424
talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes...
CVE-1999-0239
CVE-1999-0239 affects Netscape FastTrack Web Server. When a remote client issues a request using a lowercase “get” command instead of an uppercase GET, the server may return a directory listing rather than a protected default page (e.g., index.html). This results in an information-disclosure cond...
CVE-1999-0425
CVE-1999-0425 affects Netscape 4.5 where the TalkBack feature can be exploited by a local user to kill an arbitrary process of another user when Netscape crashes. The issue is documented across multiple sources (NVD entry, Red Hat advisory, CVE records, and PT-SECURITY report) with the core descr...
CVE-1999-0269
CVE-1999-0269 affects Netscape Enterprise servers, where the PageServices query can disclose directory listings. The core issue is an information disclosure vulnerability permitting an unauthenticated remote attacker to list files via crafted requests containing an area like ‘?PageServices’. Mult...
CVE-1999-0479
CVE-1999-0479 is a Denial of Service affecting Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. The public description and related records identify the vulnerability as a network-present DoS impacting availability (partial), with no authentication required and no impact to conf...