1178 matches found
Netscape Communicator 4.x - URL Read
source: https://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and netscape.net.URLInputSteam classes. This allows malicio...
Netscape Communicator 4.x - URL Read
Netscape Communicator 4.x - URL Read source: https://www.securityfocus.com/bid/1546/info A flaw in Netscape Communicator's implementation of Java allows malicious applets to read any resource reachable via a URL from the local machine by using the netscape.net.URLConnection and...
CVE-2000-0655
Netscape Communicator 4.73 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a JPEG image containing a comment with an illegal field length of 1...
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to...
JPEG COM Marker Processing Vulnerability in Netscape Browsers
-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...
Переполнение кучи в Netscape и Mozilla на JPEG-файлах.
Можно переполнить память отведенную для жранения поля комментария JPEG-файла указав некорректную длину заголовка...
netscape.jpg-marker.txt
-----BEGIN PGP SIGNED MESSAGE----- OW-002-netscape-jpeg, revision 1 July 25, 2000 JPEG COM Marker Processing Vulnerability in Netscape Browsers ------------------------------------------------------------- This advisory explains a vulnerability in Netscape browsers present since at least version...
Netscape Communicator 4.x - JPEG-Comment Heap Overwrite
source: https://www.securityfocus.com/bid/1503/info Netscape Browsers use the Independent JPEG Group's decoder library to process JPEG encoded images. The library functions skip JPEG comments; however, the browser uses a custom function to process these comments and store them in memory. The...
CRYX present: netscape profesional services ftp service
Yeah, yeah, it is gonna be first C.R.Y.X. advisory, blah!:- we reporting it to you, people, because th1z vulnerability seems to fly around for some time, so it'z probably better to warn someone, b'koz we aren't lame scr1ptz-kiddiez expl0iting everone around with their 0day-stolen script! actually...
Еще одна серьезная дырка в Netscape Professional Services
Переполнение буфера через ошибку командной строки в FTP-Сервисе...
Netscape Administration Server /admin-serv/config/admpw Admin Password Disclosure
The file /admin-serv/config/admpw is readable. This file contains the encrypted password for the Netscape administration server. Although it is encrypted, an attacker may attempt to crack it by brute force. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10468;...
Security Advisory: Netscape Administration Server Password Disclosure. ( netscape.ad-1.00-07 )
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
Дырка в серверных продуктах Netscape
Хэш пароля администрирования содержится в файле открытом на чтение: http://www.server.com/admin-serv/config/admpw...
netscape.ad.00-07
July 11, 2000 Security Advisory netscape.ad.00-07 : Netscape Administration Server Password Disclosure. Affected Platforms: AIX Digital-Unix HP-Unix IRIX Linux Solaris WindowsNT Affected Versions: Netscape SuiteSpot running on: Netscape Enterprise/3.5.1C Netscape Enterprise/3.5.1G Netscape...
CVE-2000-0034
Netscape 4.7 is affected by CVE-2000-0034: during IMAP/POP sessions, the application records user passwords in the preferences.js file even when “remember passwords” is not enabled. Root cause is password storage in preferences.js, as documented in PT-1999-1842 and echoed in CVE records. Impact i...
CVE-2000-0409
CVE-2000-0409 affects Netscape 4.73 and earlier. When importing a new certificate, Netscape follows symlinks, allowing a local user to overwrite files owned by the user importing the certificate. The available documents state the issue and the affected behavior but do not specify exact vulnerable...
CVE-2000-0236
CVE-2000-0236 affects Netscape Enterprise Server (and related Web Publisher components) where enabling Directory Indexing allows unauthenticated remote attackers to enumerate server directories via published tags such as ?wp-ver-info and ?wp-cs-dump . The vulnerability is triggered by the Web Pub...
CVE-2000-0236
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump...