1178 matches found
Important: Red Hat Security Advisory: : Updated Netscape packages are now available
Updated Netscape 4.8 packages fixing various bugs and vulnerabilities are now available. Netscape is a suite of Internet utilities including a Web browser, email client, and Usenet news reader. Netscape version 4.8 contains various bugfixes and updates. Note that Macromedia Flash is no longer...
Mozilla/Netscape crossite scripting
If dot is present in the end of hostname Mozilla teat part of the path as a domain...
"netscape navigator" is cracked.
Readers' Favorite - Make Notes in Your Browser today! http://liudieyuinchina.vip.sina.com/domex/aPoP/ http://domex.int.tc/ "netscape navigator" is cracked. "that's all" is end of file if you are in a hurry tested OS:Windows Server 2003 Enterprise Browser: "Netscape Navigator 7.02" "Mozilla/5.0...
Multiple Java virtual machines bugs
Multiple bugs in Netscape and Internet Explorer virtual java machines...
CVE-2002-0594
CVE-2002-0594 affects Netscape 6 and Mozilla 1.0 RC1 and earlier. A CSS LINK element that triggers an HTTP redirect can let remote attackers determine the existence of local files, exposing partial confidentiality. The CVSS v2 base score is 5.0 (Network, Low complexity, No user interaction). Red ...
CVE-2001-0921
Netscape 4.79 and earlier for MacOS allows an attacker with access to the browser to obtain passwords from form fields by printing the document into which the password has been typed, which is printed in cleartext...
CVE-2001-0921
Technical details about CVE-2001-0921 are not publicly provided in the connected documents. The initial description describes a memory-sensitive form-field exposure in Netscape 4.79 on macOS; monitor for updates.
CVE-2002-0594
Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to determine the existence of files on the client system via a LINK element in a Cascading Style Sheet CSS page that causes an HTTP redirect...
CVE-2002-0076
Java Runtime Environment JRE Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in 1 Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, 2 Netscape 6.2.1 and earlier, and...
Netscape 6.07.0 - Style Sheet Denial of Service
Netscape 6.07.0 - Style Sheet Denial of Service source: https://www.securityfocus.com/bid/6937/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code. If a malicious page is viewed the browser reportedly...
Netscape 7.0 - JavaScript Regular Expression Denial of Service
source: https://www.securityfocus.com/bid/6959/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when executing certain JavaScript methods. If a malicious page containing a specially crafted JavaScript regular expression method is viewed the...
Netscape 7.0 - JavaScript Regular Expression Denial of Service
Netscape 7.0 - JavaScript Regular Expression Denial of Service source: https://www.securityfocus.com/bid/6959/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when executing certain JavaScript methods. If a malicious page containing a...
Netscape 6.0/7.0 - Style Sheet Denial of Service
source: https://www.securityfocus.com/bid/6937/info It has been reported that Netscape based browsers may be vulnerable to a denial of service condition when rendering certain style sheet code. If a malicious page is viewed the browser reportedly becomes unstable. One possible condition mentioned...
Netscape / iPlanet .perf Remote Information Disclosure
Requesting the URI /.perf gives information about the currently running Netscape/iPlanet web server. This script was written by Sullo [email protected] Changes by Tenable: - Changed family, output formatting 9/2/09 - Revised plugin title 9/18/09 - Replaced URL 6/4/13 include"compat.inc"; ifdescripti...
Netscape Enterprise Default Administrative Password
This host is running Netscape Enterprise Server. The administrative interface for this web server is using the default username and password of 'admin'. An attacker can use this to reconfigure the web server, cause a denial of service condition, or gain access to this host. %NASLMINLEVEL 70300 Th...
CVE-2002-2248
Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method...
CVE-2002-2308
Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself...
CVE-2002-1766
Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute...