CveMateVulnerability intelligence

Netscape vulnerabilities, page 3

110 vulnerabilities

Known vulnerabilities in Netscape products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 21 products.

CVE-2000-0960netscapemessaging_server25y ago22-01-2001 05:00

The POP3 server in Netscape Messaging Server 4.15p1 generates different error messages for incorrect user names versus incorrect passwords, which allows remote attackers to determine valid users on the system and harvest email addresses for spam abuse.CVE-2000-0237netscapeenterprise_server26y ago13-10-2000 04:00

Netscape Enterprise Server with Web Publishing enabled allows remote attackers to list arbitrary directories via a GET request for the /publisher directory, which provides a Java applet that allows the attacker to browse the directories.CVE-2000-0676netscapecommunicator26y ago13-10-2000 04:00

Netscape Communicator and Navigator 4.04 through 4.74 allows remote attackers to read arbitrary files by using a Java applet to open a connection to a URL using the "file", "http", "https", and "ftp" protocols, as demonstrated by Brown Orifice.CVE-2000-0409netscapecommunicator26y ago12-07-2000 04:00

Netscape 4.73 and earlier follows symlinks when it imports a new certificate, which allows local users to overwrite files of the user importing the certificate.CVE-2000-0308netscapeenterprise_server+325y ago07-05-2001 04:00

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.CVE-2000-0711microsoftvirtual_machine+126y ago13-10-2000 04:00

Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.CVE-2000-0961netscapemessaging_server+125y ago22-01-2001 05:00

Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.CVE-1999-1130netscapeenterprise_server25y ago12-09-2001 04:00

Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.CVE-1999-1532netscapemessaging_server25y ago12-09-2001 04:00

Netscape Messaging Server 3.54, 3.55, and 3.6 allows a remote attacker to cause a denial of service (memory exhaustion) via a series of long RCPT TO commands.CVE-1999-1189netscapecommunicator+122y ago01-09-2004 04:00

Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.CVE-1999-1357netscapecommunicator25y ago12-09-2001 04:00

Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.CVE-1999-1226netscapecommunicator24y ago09-03-2002 05:00

Netscape Communicator 4.7 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long certificate key.CVE-1999-1262netscapecommunicator24y ago09-03-2002 05:00

Java in Netscape 4.5 does not properly restrict applets from connecting to other hosts besides the one from which the applet was loaded, which violates the Java security model and could allow remote attackers to conduct unauthorized activities.CVE-1999-1005netscapeenterprise_server+126y ago25-04-2000 04:00

Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELP parameter.CVE-1999-1002netscapecommunicator26y ago04-02-2000 05:00

Netscape Navigator uses weak encryption for storing a user's Netscape mail password.CVE-1999-0007c2netstonghold_web_server+1227y ago29-09-1999 04:00

Information from SSL-encrypted sessions via PKCS #1.CVE-1999-0853netscapeenterprise_server+126y ago18-01-2000 05:00

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.CVE-1999-0751netscapeenterprise_server26y ago04-01-2000 05:00

Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.CVE-1999-0043bsdibsd_os+627y ago29-09-1999 04:00

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.CVE-1999-0762netscapecommunicator26y ago04-01-2000 05:00

When Javascript is embedded within the TITLE tag, Netscape Communicator allows a remote attacker to use the "about" protocol to gain access to browser information.