CVE-2005-0989

CVE-2005-0989 concerns the Mozilla family JavaScript engine. Affected products include Mozilla Suite 1.7.6, Firefox 1.0.1/1.0.2, and Netscape 7.2. The vulnerability arises in the find_replen function in jsstr.c, enabling a remote attacker to read portions of heap memory through the string replace...

Mozilla / Firefox / Netscape javascript information leak

It's possible to access random heap content with string replacement functions...

CVE-2002-1654

The CVE affects iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1. A flaw allows remote attackers to initiate HTTP Basic Authentication through the wp-force-auth Web Publisher command, creating a distinct attack vector and potentially making brute-force password gue...

CVE-2002-1655

The CVE-2002-1655 entry affects the Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x. The vulnerability allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. No remediation details, exploit status, or additional impact informat...

CVE-2002-1655

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service crash via a wp-html-rend request...

CVE-2002-1654

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing withou...

CVE-2005-0399

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

security flaw

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

security flaw

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

security flaw

Heap-based buffer overflow in GIF2.cpp in Firefox before 1.0.2, Mozilla before to 1.7.6, and Thunderbird before 1.0.2, and possibly other applications that use the same library, allows remote attackers to execute arbitrary code via a GIF image with a crafted Netscape extension 2 block and buffer...

GIF heap overflow parsing Netscape extension 2 — Mozilla

An GIF processing error when parsing the obsolete Netscape extension 2 can lead to an exploitable heap overrun, allowing an attacker to run arbitrary code on the user's machine...

HP-UX Security patch : PHSS_15993

The remote host is missing HP-UX Security Patch number PHSS15993 . Security Vulnerability with Netscape on VVOS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17439;...

HP-UX Security patch : PHSS_15994

The remote host is missing HP-UX Security Patch number PHSS15994 . Security Vulnerability with Netscape on VVOS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17440;...

HP-UX Security patch : PHSS_15936

The remote host is missing HP-UX Security Patch number PHSS15936 . Security Vulnerability with Netscape on VVOS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17438;...

DEBIAN-CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

Race condition in Squid 2.5.STABLE7 to 2.5.STABLE9, when using the Netscape Set-Cookie recommendations for handling cookies in caches, may cause Set-Cookie headers to be sent to other users, which allows attackers to steal the related cookies...

CVE-2005-0626

CVE-2005-0626 affects Squid 2.5.STABLE7–2.5.STABLE9 in the Netscape Set-Cookie handling path. The race condition can cause Set-Cookie headers to leak to other users, enabling cookie theft. Affected: Squid proxy/cache; root cause: incorrect handling of Set-Cookie in cached responses, per multiple ...

CVE-2004-1753

The CVE-2004-1753 issue affects the Apple Java plugin used by Netscape 7.1/7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5. The vulnerability stems from improper handling of SetWindow(NULL) calls when tabbed browsing is enabled, allowing Java applets from one tab to draw to other tabs and...

HP-UX Security patch : PHSS_15935

The remote host is missing HP-UX Security Patch number PHSS15935 . Security Vulnerability with Netscape on VVOS %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16749;...