CVE-2000-0406

The CVE-2000-0406 entry describes: Netscape Communicator before 4.73 and Navigator 4.07 do not properly validate SSL certificates, enabling remote attackers to redirect traffic to a malicious server (Acros-Suencksen SSL) and potentially steal data. No remediation or exploit details are provided i...

CVE-2000-0406

Netscape Communicator before version 4.73 and Navigator 4.07 do not properly validate SSL certificates, which allows remote attackers to steal information by redirecting traffic from a legitimate web server to their own malicious server, aka the "Acros-Suencksen SSL" vulnerability...

Concerning the LDAP Enabled Netscape FTP Server

Over the last few days a great number of people have mailed us in regards to the "Netscape Professional Services FTP Server Vulnerability" http://www.securityfocus.com/bid/1375 discovered by Michal Zalewski [email protected] and posted to the Bugtraq mailing list on Wed, 21 Jun 2000. The following...

Большие дыры в Netscape ftp сервер

Используя обратный путь в директориях можно получить любой файл с сервера, найти физическое расположение файлов, получить файл с паролем администрирования...

netscape.netware.txt

Netscape Enterprise Server for NetWare Virtual Directory Vulnerability Advisory Code: VIGILANTE-2000001 Release Date: June 26, 2000 Systems Affected: NetWare 5.1 prior to support pack 1 NetWare 5.0 - all support packs Possibly older versions of NetWare as well not tested THE PROBLEM By issuing a...

Netscape Enterprise Server for NetWare Virtual Directory Vulnerab ility

Netscape Enterprise Server for NetWare Virtual Directory Vulnerability Advisory Code: VIGILANTE-2000001 Release Date: June 26, 2000 Systems Affected: NetWare 5.1 prior to support pack 1 NetWare 5.0 - all support packs Possibly older versions of NetWare as well not tested THE PROBLEM By issuing a...

Переполнение буфера в Netscape Enterprise под Novell

Классическое переполнение буфера при неправильно сформированном URL в GET-запросе...

CVE-2000-0600

Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL...

Netscape FTP Server - "Professional" as hell :>

Standard disclaimer applies. These are my private oppinions and observations. Netscape Professional Services FTP server is used on high-performance servers for accessing virtual webserver accounts etc. It works with LDAP and seems to be quite often shipped by Sun with ISP instalations. Due to poo...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

netscape.ftp.txt

Standard disclaimer applies. These are my private oppinions and observations. Netscape Professional Services FTP server is used on high-performance servers for accessing virtual webserver accounts etc. It works with LDAP and seems to be quite often shipped by Sun with ISP instalations. Due to poo...

Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server

Netscape Professional Services FTP Server LDAP Aware 1.3.6 - FTP Server source: https://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote o...

Netscape Professional Services FTP Server (LDAP Aware) 1.3.6 - FTP Server

source: https://www.securityfocus.com/bid/1411/info Certain versions of the LDAP-aware Netscape Professional Services FTP Server distributed with Enterprise Web Server have a serious vulnerability which may lead to a remote or local root compromise. The vulnerability in essence is a failure of of...

CVE-1999-0031

JavaScript in Internet Explorer 3.x and 4.x, and Netscape 2.x, 3.x and 4.x, allows remote attackers to monitor a user's web activities, aka the Bell Labs vulnerability...

CVE-1999-0142

The CVE-1999-0142 issue concerns the Java Applet Security Manager in Netscape Navigator 2.0 and Java Developer’s Kit 1.0, where an applet could connect to arbitrary hosts due to how the security manager operates. Affected software/components are the Java Applet Security Manager implementation wit...

CVE-1999-0031

The CVE-1999-0031 issue affects legacy browsers: Internet Explorer 3.x–4.x and Netscape 2.x–4.x . The vulnerability description states that JavaScript in these browsers allows remote attackers to monitor a user’s web activities (the Bell Labs vulnerability). The connected sources confirm the affe...

CVE-1999-0142

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts...

spad01.txt

Security Point [email protected] www.secpoint.com/advis.html Advisory 001 Title: Java Internet Shop Vulnerability Date: 31-05-00 Copyright c 2000 SECURITY POINT Contents: ========= I Disclaimer II Introduction III Description IV Fix V Contact VI Vulnerable sites VII Job Offers VIII Greetings I -...

new vulnerability in Netscape effectively disables SSL server auth

-----BEGIN PGP SIGNED MESSAGE----- Introduction ============ This vulnerability defeats SSL server authentication in Netscape 4.73 and earlier versions. This is a new vulnerability unrelated to CERT advisory 2000-5. However, it has a similar devastating effect: destroying SSL server authenticatio...

Еще одна уязвимость в сертификатах Netscape

Если сертификат не соответствует имени серверу, то пользователю дается предупреждение. Если пользователь продолжает соединение, то предупреждения для данного сертификата больше не даются и он может быть использован для любого сервера...