Netscape: >> Enterprise Server >> 3.5.1 Security Vulnerabilities
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
CVSS Score
7.5
EPSS Score
0.03
Published
2004-12-31
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
CVSS Score
5.0
EPSS Score
0.006
Published
2001-03-12
Netscape Enterprise Server with Directory Indexing enabled allows remote attackers to list server directories via web publishing tags such as ?wp-ver-info and ?wp-cs-dump.
CVSS Score
5.0
EPSS Score
0.036
Published
2000-03-17
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
CVSS Score
7.5
EPSS Score
0.046
Published
2000-01-04
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
CVSS Score
10.0
EPSS Score
0.009
Published
1999-12-01
Buffer overflow in Accept command in Netscape Enterprise Server 3.6 with the SSL Handshake Patch.
CVSS Score
5.0
EPSS Score
0.034
Published
1999-09-13
Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file.
CVSS Score
5.0
EPSS Score
0.038
Published
1999-07-30
Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake.
CVSS Score
5.0
EPSS Score
0.037
Published
1999-07-06
Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL.
CVSS Score
5.0
EPSS Score
0.007
Published
1999-05-07
Netscape Enterprise servers may list files through the PageServices query.
CVSS Score
5.0
EPSS Score
0.034
Published
1998-08-01
Page 1