1178 matches found
Netscape.Publisher.ACL.txt
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
Проблемы с разрешениями в Netscape Enterprise Server
В установке по-умолчанию большое число "слабых" разрешений, которык могут привести к компрометации сервера в компоненте "Web Publisher"...
Netscape E.S. Web Publisher ACL Vulnerabilities
Vendor: Netscape Product: Enterprise Server 3.5.1 and others? Specifics: Netscape Web Publisher Vulnerability Briefing: A very wide problem with ACL settings and default settings with Netscape Enterprise Server Publisher. Description: With the default installation of Netscape Enterprise Server...
defcom.netscape-fasttrack.txt
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
defcom.netscape-enterprise.txt
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Gründl Release Date: 2001-01-22 ====================================================================== ------------------------=Brief...
Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Command Execution
!/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingreslock stream tcp nowait root /bin/sh sh -i' /tmp/bob; /usr/sbin/inetd -s...
Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution
Netscape Enterprise Server 4.0sparcSunOS 5.7 - Remote Command Execution !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline="echo 'ingresloc...
Yet Another IBM WebSphere Showcode Vulerability
Summary: When IBM WebSphere application server shares the same document root as Netscape Enterprise server it is possible for a malicious user to view to view the source of any JSP file in the document root. WebSphere's plugin for Netscape Enterprise server uses the host header sent from the clie...
[SAFER] Security Bulletin 010125.DOS.1.5
S.A.F.E.R. Security Bulletin 010125.DOS.1.5 TITLE : Netscape Enterprise Server - REVLOG request problem DATE : January 25, 2001 NATURE : Denial-of-Service AFFECTED : Netscape Enterprise Server 3.x with Web Publishing enabled PROBLEM: Problems exists that allows remote user to crash Netscape...
DoS против Netscape Enterprise Server
Запрос с большим количеством "/.." приводит к краху сервера. Кроме того сервер неадекватно реагирует на запросы REVLOG и INDEX...
Дырки в Netscape 6
Несколько переполнений буфера...
[SAFER] Security Bulletin 010124.EXP.1.11
S.A.F.E.R. Security Bulletin 010124.EXP.1.11 TITLE : Netscape Enterprise Server - INDEX request problem DATE : January 24, 2001 NATURE : Information gathering AFFECTED : Netscape Enterprise Server 3.x and 4.x with Web Publishing enabled PROBLEM: Problems exists that allows remote user to obtain...
Netscape Enterprise Server 3.0/4.0 - 'Index' Disclosure
source: https://www.securityfocus.com/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request. INDEX / HTTP/1.0...
Netscape Enterprise Server 3.04.0 - Index Disclosure
Netscape Enterprise Server 3.04.0 - Index Disclosure source: https://www.securityfocus.com/bid/2285/info Netscape Enterprise Server with Web Publishing enabled will disclose the directory listing of the server to unauthenticated users who submit an INDEX request. INDEX / HTTP/1.0...
def-2001-05: Netscape Fasttrack Server Caching DoS
====================================================================== Defcom Labs Advisory def-2001-05 Netscape Fasttrack Server Caching DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
DoS против Netscape Fasttrack
Большое число запросов к несуществующим страницам приводит к утечке памяти в прокси...
def-2001-04: Netscape Enterprise Server Dot-DoS
====================================================================== Defcom Labs Advisory def-2001-04 Netscape Enterprise Server Dot-DoS Author: Peter Grьndl [email protected] Release Date: 2001-01-22 ======================================================================...
CVE-2000-0960
The vulnerability CVE-2000-0960 affects Netscape Messaging Server 4.15p1: the POP3 server exposes user enumeration by returning different error messages for incorrect usernames versus incorrect passwords, enabling an attacker to determine valid accounts and harvest email addresses. The connected ...
CVE-2000-1187
CVE-2000-1187 involves a buffer overflow in the HTML parser of Netscape 4.75 and earlier. The vulnerability allows remote attackers to execute arbitrary commands by supplying a long password value in a form field. The available documents explicitly describe the affected component (HTML parser), t...
