CVE-2000-0237

CVE-2000-0237 affects Netscape Enterprise Server with Web Publishing enabled. A GET request to the /publisher directory serves a Java applet that allows remote attackers to list arbitrary directories, enabling directory browsing and potential exposure of server contents. The provided documents do...

CVE-2004-0826

CVE-2004-0826 affects the Netscape Network Security Services (NSS) library’s SSLv2 record parsing. The issue is a heap-based buffer overflow triggered by a modified record length field in an SSLv2 client hello, allowing a remote attacker to execute arbitrary code. Multiple advisories and OpenVAS ...

CVE-1999-0269

CVE-1999-0269 affects Netscape Enterprise servers, where the PageServices query can disclose directory listings. The core issue is an information disclosure vulnerability permitting an unauthenticated remote attacker to list files via crafted requests containing an area like ‘?PageServices’. Mult...

CVE-2000-0236

CVE-2000-0236 affects Netscape Enterprise Server (and related Web Publisher components) where enabling Directory Indexing allows unauthenticated remote attackers to enumerate server directories via published tags such as ?wp-ver-info and ?wp-cs-dump . The vulnerability is triggered by the Web Pub...

CVE-1999-0012

CVE-1999-0012 affects some Microsoft Windows-based web servers where remote attackers can bypass file access restrictions for files with long file names. The connected documents confirm the vulnerability description but do not provide concrete product versions, fixed versions, or remediation step...

CVE-1999-0007

Technical details for CVE-1999-0007 are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-1999-0045

CVE-1999-0045 concerns an information-disclosure flaw in the nph-test-cgi script used by some web servers, where an unauthenticated attacker can list directory contents. The Nessus plugin (NCDSA HTTPd nph-test-cgi Arbitrary Directory Listing) explains that the issue arises because the script does...

CVE-2002-1042

CVE-2002-1042 describes a directory traversal flaw in iPlanet Web Server 6.0 SP2, 4.1 SP9, and Netscape Enterprise Server 3.6 on Windows, allowing remote attackers to read arbitrary files via ..\ in the NS-query-pat parameter. Connected sources confirm the affected products and the vulnerable par...

CVE-1999-0479

CVE-1999-0479 is a Denial of Service affecting Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. The public description and related records identify the vulnerability as a network-present DoS impacting availability (partial), with no authentication required and no impact to conf...

CVE-1999-0686

CVE-1999-0686 affects Netscape Enterprise Server (NES) within HP Virtual Vault (VVOS). The vulnerability is a denial-of-service triggered by a long URL. The available sources (NVD, Red Hat, CVE list) describe a DoS impact with partial availability but do not provide concrete root-cause details, a...

CVE-1999-0744

CVE-1999-0744 describes a buffer overflow in Netscape Enterprise Server and FastTrask Server . The vulnerability allows remote attackers to gain privileges by sending a long HTTP GET request. The primary impact documented is privilege escalation with partial confidentiality/integrity/availability...

CVE-1999-1005

Vulnerability (CVE-1999-1005) GroupWise Web Interface GWWEB.EXE permits remote file read via a directory-traversal style attack on the HELP parameter, enabling reading local files with .htm extensions. The OpenVAS entry corroborates that by modifying the GroupWise Web Interface HELP URL request, ...

CVE-2000-0308

CVE-2000-0308 affects Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 on SCO UnixWare 7.0.x/2.1.3. Insecure file permissions could allow an attacker to gain root privileges. The initial description does not provide exploit specifics or a patched version; no exploitation...

CVE-1999-0751

CVE-1999-0751 : Buffer overflow in the Accept command of Netscape Enterprise Server 3.6 with the SSL Handshake Patch. The issue is remote and related to the Accept header/argument length, potentially allowing code execution on the remote system and impacting availability. Affected product: Netsca...

CVE-2001-0250

CVE-2001-0250 : The vulnerability affects the Web Publishing feature of Netscape Enterprise Server (version 4.x and earlier). A remote attacker can trigger an arbitrary directory listing by sending the INDEX command to the web server, exposing internal site structure. Impact is information disclo...

CVE-1999-0758

Affected software: Netscape Enterprise 3.5.1 and FastTrack 3.01. Vulnerability: remote attacker can view the source code of scripts by appending a space-encoded %20 to the script URL. Root cause / vector: insufficient handling of trailing spaces in URLs that leads to source disclosure. Impact: ex...

CVE-2002-1654

The CVE affects iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1. A flaw allows remote attackers to initiate HTTP Basic Authentication through the wp-force-auth Web Publisher command, creating a distinct attack vector and potentially making brute-force password gue...

CVE-1999-0752

CVE-1999-0752 pertains to a denial-of-service in Netscape Enterprise Server caused by a buffer overflow during the SSL handshake. Connected sources corroborate a handshake-related DoS vector with the affected product as Netscape Enterprise Server; however, none of the provided documents specify a...

CVE-2002-1655

The CVE-2002-1655 entry affects the Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x. The vulnerability allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. No remediation details, exploit status, or additional impact informat...

CVE-1999-0853

CVE-1999-0853 corresponds to a buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server that can allow a remote attacker to gain privileges through the HTTP Basic Authentication mechanism. Connected OpenVAS/Nessus entries identify affected products as Netscape Enterprise Server...

CVE-2001-0251

CVE-2001-0251 affects Netscape Enterprise Server 3.x via the Web Publishing feature. The vulnerability allows remote attackers to cause a denial-of-service by sending the REVLOG command. The connected documents corroborate the issue across multiple sources (NVD entry, CVE record, and EUVD referen...

CVE-1999-1130

Technical details about CVE-1999-1130 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-0600

Netscape Enterprise Server on NetWare 5.1 is affected by CVE-2000-0600. The vulnerability allows remote attackers to cause a denial of service or to execute arbitrary commands via a malformed URL. The connected sources confirm the affected product and the nature of the impact, but do not provide ...

CVE-2018-18940

CVE-2018-18940 : Reflected XSS in Netscape Enterprise 3.63 via an arbitrary query string parameter (SnoopServlet by default). A remote, unauthenticated attacker can supply HTML/JavaScript that is reflected back and executed in the victim’s browser. The issue centers on improper sanitization of us...