Netscape Enterprise Server 3.x4.x - PageServices Information Disclosure

Netscape Enterprise Server 3.x4.x - PageServices Information Disclosure source: https://www.securityfocus.com/bid/7621/info A vulnerability has been reported for Netscape Enterprise Server. The problem is said to occur while processing HTTP queries containing the '?PageServices' URI parameter...

Netscape Enterprise Server 3.x/4.x - PageServices Information Disclosure

source: https://www.securityfocus.com/bid/7621/info A vulnerability has been reported for Netscape Enterprise Server. The problem is said to occur while processing HTTP queries containing the '?PageServices' URI parameter. After processing this query the affected server may disclose the contents ...

CVE-1999-0269

Netscape Enterprise servers may list files through the PageServices query...

PT-1998-1053 · Netscape · Netscape Enterprise Server

Name of the Vulnerable Software and Affected Versions: Netscape Enterprise servers affected versions not specified Description: The issue allows Netscape Enterprise servers to list files through the PageServices query. Recommendations: At the moment, there is no information about a newer version...

Netscape Messaging Server 3.55 & University of Washington imapd 10.234 - Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/130/info A vulnerability exists in certain imapd implementations that allow an attacker to execute arbitrary code remotely. In certain instances, the code to be executed will be run with root privilege. Imap supports a command 'AUTHENTICATE' which...

PT-1998-1098 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Netscape Navigator affected versions not specified Description: A configuration in web browsers allows the execution of active content, including ActiveX, Java, and Javascript. Recommendations...

CVE-1999-0239

Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET...

PT-1998-1044 · Netscape · Netscape Fasttrack Web Server

Name of the Vulnerable Software and Affected Versions: Netscape FastTrack Web server affected versions not specified Description: The issue allows the listing of files when a lowercase "get" command is used instead of an uppercase GET. Recommendations: At the moment, there is no information about...

CVE-1999-1262

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities...

CVE-1999-0031

JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability...

PT-1997-1015 · Microsoft +1 · Internet Explorer +1

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 3.x through 4.x Netscape versions 2.x through 4.x Description: The issue allows remote attackers to monitor a user's web activities. This is related to JavaScript in the affected browsers. Recommendations: For...

Apache 1.1 / NCSA HTTPd 1.5.2 / Netscape Server 1.12/1.1/2.0 - a nph-test-cgi

Apache Replace with the hostname of a server running a web daemon near you...

CVE-1999-0142

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

PT-1996-1030 · Oracle +1 · Java Applet Security Manager +2

Name of the Vulnerable Software and Affected Versions: Netscape Navigator version 2.0 Java Developer's Kit version 1.0 Description: The issue concerns the Java Applet Security Manager implementation, which allows an applet to connect to arbitrary hosts. Recommendations: For Netscape Navigator...

Microsoft IIS 1.0 / Netscape Server 1.0/1.12 / OReilly WebSite Professional 1.1b - '.cmd' / '.CMD' Remote Command Execution

IIS 1.0,Netscape Commerce Server 1.0/Communications Server 1.12,OReilly Software WebSite Professional 1.1 b BAT/.CMD Remote Command Execution source: https://www.securityfocus.com/bid/2023/info Some web servers that allow batch files to be executed via CGI are vulnerable to an attack whereby an...

Netscape servers Denial of Service

Advisory ID Internal CORE-2103102 Bugtraq ID: 1867 CVE Name: Non currently assigned. Title: Netscape servers Denial of Service Class: Denial of Service Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode: USER RELEASE Communications with the vendor have been remarkably difficult and t...

BEA Weblogic Multiple Buffer Overflow Vulnerabilities

Advisory ID Internal CORE-081300 Bugtraq ID: 1570 CVE Name: CVE-2000-0681 Title: BEA Weblogic Multiple Buffer Overflow Vulnerabilities Class: Boundary Error Condition Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vulnerability Description: BEA Systems Inc. Weblogic server...

Netscape Servers Heap Buffer Overflow

Advisory ID Internal CORE-2103101 Bugtraq ID: 1865 CVE Name: Non currently assigned. Title: Netscape Servers Heap Buffer Overflow Class: Boundary Condition Error Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Release Mode: USER RELEASE Communications with the vendor have been...