Netscape SmartDownload 1.3 - Remote Buffer Overflow

Netscape SmartDownload 1.3 - Remote Buffer Overflow source: https://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function th...

SGI systems may execute commands embedded in mail messages

Overview Some SGI systems produced circa 1998 allowed an intruder to send mail that would execute commands when the reader opened the message. Description On some SGI systems, Netscape is bundled with IRIX 6.3 and 6.4 and is used as the default web browser and mail reader. On these systems, the...

Netscape SmartDownload 1.3 - Remote Buffer Overflow

source: https://www.securityfocus.com/bid/2615/info Netscape SmartDownload, a download manager add-on for popular web browsers, is vulnerable to a buffer overflow. The library 'sdph20.dll' used by SmartDownload contains an URL parser function that will overflow when a user visits or is redirected...

Дырка в Netscape (gif comment scripting)

javascript вставленный в комментарий GIF-файла будет выполнен в контексте локальной машины...

Netscape 4.76 gif comment flaw

Product: Netscape Navigator/Communicator Tested on: 4.76 on Linux and Win98/NT Vendor Contact: Reported 2001-03-22 Problem -------------------------------------------------------- - Overview: The Netscape browser does not escape the gif file comment in the image information page. This allows...

Netscape Navigator 4.0.8 - about: Domain Information Disclosure

Netscape Navigator 4.0.8 - about: Domain Information Disclosure source: https://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment...

Netscape Navigator 4.0.8 - 'about:' Domain Information Disclosure

source: https://www.securityfocus.com/bid/2637/info Due to a flaw in Navigator's security code, all URLs in the about: protocol are considered to be part of the same domain. If arbitrary Javascript code is placed in a GIF's comment field, it is treated like a normal HTML page. The Javascript code...

CVE-2001-0251

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command...

CVE-2001-0312

CVE-2001-0312 affects the IBM WebSphere plugin for Netscape Enterprise Server. The issue allows remote attackers to read JSP source code by issuing an HTTP request whose Host header references a host not in WebSphere’s host aliases, bypassing normal processing. The available connected documents p...

CVE-2001-0250

CVE-2001-0250 : The vulnerability affects the Web Publishing feature of Netscape Enterprise Server (version 4.x and earlier). A remote attacker can trigger an arbitrary directory listing by sending the INDEX command to the web server, exposing internal site structure. Impact is information disclo...

CVE-2001-0250

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command...

CVE-2001-0251

CVE-2001-0251 affects Netscape Enterprise Server 3.x via the Web Publishing feature. The vulnerability allows remote attackers to cause a denial-of-service by sending the REVLOG command. The connected documents corroborate the issue across multiple sources (NVD entry, CVE record, and EUVD referen...

CVE-2001-0175

The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service resource exhaustion by requesting a large number of non-existent URLs...

CVE-2000-0308

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges...

CVE-1999-0758

Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL...

PT-2001-1084 · Netscape +1 · Netscape Enterprise +1

Name of the Vulnerable Software and Affected Versions: Netscape Enterprise version 3.5.1 FastTrack version 3.01 Description: A remote attacker can view the source code of scripts by appending a %20 to the script's URL. Recommendations: For Netscape Enterprise version 3.5.1, update the server...

Дырка в Netscape Directory Server (buffer overflow)

Переполнение буфера при разборе LDAP-запроса...

@stake Advisory Notification: Netscape Directory Server buffer overflow (A030701-1)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Notification Advisory Name: Netscape Directory Server buffer overflow Release Date: 03/07/2001 Application: Netscape Directory Server 4.1 bundled with Netscape Messaging Server Netscape Directory Server...

DoS против Netscape Collabra (tcp 5238 flood)

Около 5000 Кб в порт TCP/5238 приводит к краху сервера...

def-2001-08: Netscape Collabra DoS

====================================================================== Defcom Labs Advisory def-2001-08 Netscape Collabra DoS Author: Peter Grьndl [email protected] Release Date: 2001-02-26 ====================================================================== ------------------------=Brief...