CPE Details
Netscape Netscape Enterprise Server 3.4
3.4
2007-08-23
19h16 +00:00
19h16 +00:00
2008-04-01
14h40 +00:00
14h40 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*
Informations
Vendor
netscapeProduct
enterprise_serverVersion
3.4Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection. | 7.5 |
|||
| The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. | 5 |
|||
| Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message. | 7.5 |
|||
| Default configuration of the search engine in Netscape Enterprise Server 3.5.1, and possibly other versions, allows remote attackers to read the source of JHTML files by specifying a search command using the HTML-tocrec-demo1.pat pattern file. | 5 |
|||
| Denial of service in Netscape Enterprise Server (NES) in HP Virtual Vault (VVOS) via a long URL. | 5 |
|||
| Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request. | 7.5 |
|||
| Denial of service in Netscape Enterprise Server via a buffer overflow in the SSL handshake. | 5 |
|||
| Netscape Enterprise servers may list files through the PageServices query. | 5 |
2025©
tesweb SA
