Enterprise Server Security Vulnerabilities and Issues — Enterprise Server CVE List

Lucene search

NetscapeEnterprise Server

14 matches found

CVE•added 1999/09/29 4:0 a.m.•145 views

CVE-1999-0269

Netscape Enterprise servers may list files through the PageServices query.

5CVSS6.8AI score0.03354EPSS

CVE•added 2000/07/12 4:0 a.m.•116 views

CVE-2000-0236

Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.

5CVSS6.7AI score0.03624EPSS

CVE•added 1999/09/29 4:0 a.m.•79 views

CVE-1999-0007

Information from SSL-encrypted sessions via PKCS #1.

5CVSS7.4AI score0.05124EPSS

CVE•added 2002/10/04 4:0 a.m.•54 views

CVE-2002-1042

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter.

5CVSS6.8AI score0.08581EPSS

CVE•added 1999/09/29 4:0 a.m.•48 views

CVE-1999-0479

Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems.

5CVSS7AI score0.0071EPSS

CVE•added 2000/01/04 5:0 a.m.•44 views

CVE-1999-0686

Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.

5CVSS6.9AI score0.0071EPSS

CVE•added 2001/06/02 4:0 a.m.•44 views

CVE-2001-0250

The Web Publishing feature in Netscape Enterprise Server 4.x and earlier allows remote attackers to list arbitrary directories under the web server root via the INDEX command.

5CVSS6.9AI score0.08581EPSS

CVE•added 2000/01/04 5:0 a.m.•43 views

CVE-1999-0751

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.

5CVSS7AI score0.03382EPSS

CVE•added 2000/04/25 4:0 a.m.•41 views

CVE-1999-1005

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.

5CVSS6.7AI score0.01704EPSS

CVE•added 2000/01/04 5:0 a.m.•38 views

CVE-1999-0752

Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.

5CVSS7.1AI score0.03748EPSS

CVE•added 2005/03/28 5:0 a.m.•37 views

CVE-2002-1655

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.

5CVSS7AI score0.01949EPSS

CVE•added 2001/06/02 4:0 a.m.•36 views

CVE-2001-0251

The Web Publishing feature in Netscape Enterprise Server 3.x allows remote attackers to cause a denial of service via the REVLOG command.

5CVSS7AI score0.00782EPSS

CVE•added 2001/09/12 4:0 a.m.•35 views

CVE-1999-1130

Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.

5CVSS7.2AI score0.03779EPSS

CVE•added 2001/05/07 4:0 a.m.•34 views

CVE-1999-0758

Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.

5CVSS7.2AI score0.00814EPSS