CVE-2001-1066

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2001-0683

Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service memory exhaustion by repeatedly sending approximately 5K of data to TCP port 5238...

CVE-2001-0684

CVE-2001-0684 affects Netscape Collabra Server 3.5.4 and earlier. A remote attacker can cause a denial of service by sending seven or more characters to TCP port 5239, leading to partial availability impact per the CVSS-derived metrics. No additional exploit details or remediation are provided in...

CVE-2001-0684

Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239...

CVE-2001-0683

CVE-2001-0683 describes a memory leak in Netscape Collabra Server 3.5.4 and earlier that allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5 KB of data to TCP port 5238. Affected software: Netscape Collabra Server (versions ≤ 3.5.4). Roo...

Dangerous temp file creation during installation of Netscape 6.

During installation of Netscape 6.01a for Solaris 2.7/8 Sparc, I noticed the file /tmp/admin.3842 was created with mode 644. As you already know if this package is installed by root in multiuser mode a malicious user could use this to overwrite system files etc.. Here is the dangerous code: grep...

Символьные линки в Netscape 6 (symbolic link)

Создается временный файл с предсказуемым именем без проверки символьных линков...

Netscape fails to revalidate certificates if a user has previously acknowledged a certificate to be non-matching

Overview A flaw exists in Netscape Navigator that could allow an attacker to masquerade as a legitimate web site if the attacker can compromise the validity of certain DNS information. This is different from the problem reported in CERT Advisory CA-2000-05, but it has a similar impact. This...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

CVE-2001-0596

Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript...

Linux, too, sot of (Windows MS-DOS Device Name DoS vulnerabilities)

Using img src="file:///dev/tty0" on my Linux machine caused Netscape and Mozilla both to eat all the keyboard input. I had to use another machine to kill it. I expected Netscape to NOT open file URIs from within a page fetched via !file http, https, ftp, gopher, etc.. -jwb...

Netscape/Mozilla и доступ к специальным файлам во всех OS (special device access)

При чтении html фрагмента вида img src="file:///dev/tty0" Netscape & Mozzilla подвешивают систему...

[RHSA-2001:088-04] New xloadimage packages available

--------------------------------------------------------------------- Red Hat, Inc. Red Hat Security Advisory Synopsis: New xloadimage packages available Advisory ID: RHSA-2001:088-04 Issue date: 2001-06-28 Updated on: 2001-07-09 Product: Red Hat Linux Keywords: xloadimage tif faces plugger...

Important: Red Hat Security Advisory: : New xloadimage packages available

These updated packages fix a buffer overflow in the faces reader. This is normally not a security problem; however, xloadimage is called by the 'plugger' program from inside Netscape to handle some image types. Hence, a remote site could cause arbitrary code to be executed as the user running...

CVE-2001-0262

Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers malicious web pages to execute arbitrary commands via a long URL...

Netscape Enterprise Server Long Traversal Request Remote DoS

The remote web server seems to crash when it is issued a too long request with dots ie: ../../../../ 1000 times. An attacker may use this flaw to disable the remote server. C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid10689; scriptversion "1.26";...

Netscape Enterprise Web Publishing INDEX Command Arbitrary Directory Listing

The remote web server gives a file listing when it is issued the command : INDEX / HTTP/1.1 An attacker may use this flaw to discover the internal structure of your website, or to discover supposedly hidden files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Получение пути к почтовому ящику в Netscape (mbox path)

С помощью свойства document.referrer можно получить URI e-mail сообщения, содержащего полный путь к почтовому ящику, включая login пользователя...

SECURITY.NNOV: Netscape 4.7x Messanger user information retrival

There are known bugs in Netscape which require information on user's files location. This bug is not serious one, but it allows to get this location. Topic : Netscape 4.7x user information retrival Author : 3APA3A [email protected] Affected software : Netscape 4.7x All Platforms Vendor :...

CVE-2001-0312

IBM WebSphere plugin for Netscape Enterprise server allows remote attackers to read source code for JSP files via an HTTP request that contains a host header that references a host that is not in WebSphere's host aliases list, which will bypass WebSphere processing...