CVE-1999-0853 | ByteOS Network

Vulnerability Details :

CVE-1999-0853

Assigner-mitre

Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At-18 Jan, 2000 | 05:00

Updated At-01 Aug, 2024 | 16:48

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:mitre

Assigner Org ID:8254265b-2729-46b6-b9e3-3dfca2d5bfca

Published At:18 Jan, 2000 | 05:00

Updated At:01 Aug, 2024 | 16:48

▼CVE Numbering Authority (CNA)

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.

Affected Products

Vendor

Product

Versions

Affected

n/a

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://www.securityfocus.com/bid/847	vdb-entry x_refsource_BID

Hyperlink: http://www.securityfocus.com/bid/847

Resource:

vdb-entry

x_refsource_BID

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/847	vdb-entry x_refsource_BID x_transferred

Hyperlink: http://www.securityfocus.com/bid/847

Resource:

vdb-entry

x_refsource_BID

x_transferred

▼National Vulnerability Database (NVD)

Source:cve@mitre.org

Published At:01 Dec, 1999 | 05:00

Updated At:03 Apr, 2025 | 01:03

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 10.0

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

Netscape (Yahoo Inc.)

>>enterprise_server>>3.5.1

cpe:2.3:a:netscape:enterprise_server:3.5.1:*:*:*:*:*:*:*

Netscape (Yahoo Inc.)

>>enterprise_server>>3.6

cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*

Netscape (Yahoo Inc.)

>>enterprise_server>>3.6

cpe:2.3:a:netscape:enterprise_server:3.6:sp2:*:*:*:*:*:*

Netscape (Yahoo Inc.)

>>fasttrack_server>>3.01

cpe:2.3:a:netscape:fasttrack_server:3.01:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://www.securityfocus.com/bid/847	cve@mitre.org	N/A
http://www.securityfocus.com/bid/847	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://www.securityfocus.com/bid/847

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/847

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

12Records found

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-34.63% / 96.87%

||

7 Day CHG~0.00%

Published-06 Jan, 2005 | 05:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code.

Vendor-n/a Netscape (Yahoo Inc.)

Product-directory_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.84% / 73.78%

||

7 Day CHG~0.00%

Published-22 Jan, 2001 | 05:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.

Vendor-n/a Netscape (Yahoo Inc.)

Product-netscape_messaging_server_multiplexor messaging_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-6.46% / 90.69%

||

7 Day CHG~0.00%

Published-22 Jan, 2001 | 05:00

Updated-03 Apr, 2025 | 01:03

csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root privileges by creating a Trojan Horse library in the current or parent directory.

Vendor-n/a Netscape (Yahoo Inc.)

Product-iplanet_ical n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-3.27% / 86.65%

||

7 Day CHG~0.00%

Published-07 May, 2001 | 04:00

Updated-03 Apr, 2025 | 01:03

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

Vendor-n/a Netscape (Yahoo Inc.)

Product-professional_services_ftpserver n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-23.11% / 95.71%

||

7 Day CHG~0.00%

Published-03 Aug, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.

Vendor-n/a Mozilla Corporation Netscape (Yahoo Inc.)

Product-navigator mozilla n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-31.75% / 96.65%

||

7 Day CHG~0.00%

Published-24 Sep, 2004 | 04:00

Updated-03 Apr, 2025 | 01:03

Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

Vendor-conectiva n/a Red Hat, Inc.Mozilla Corporation Netscape (Yahoo Inc.)

Product-firefox thunderbird mozilla navigator enterprise_linux_desktop fedora_core linux enterprise_linux linux_advanced_workstation n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-4.87% / 89.15%

||

7 Day CHG~0.00%

Published-14 Oct, 2007 | 20:00

Updated-03 Apr, 2025 | 01:03

Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.

Vendor-n/a Netscape (Yahoo Inc.)

Product-communicator n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-1.15% / 77.60%

||

7 Day CHG~0.00%

Published-22 Jan, 2001 | 05:00

Updated-03 Apr, 2025 | 01:03

The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X Windows events and gain privileges.

Vendor-n/a Netscape (Yahoo Inc.)

Product-iplanet_ical n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.51% / 65.58%

||

7 Day CHG~0.00%

Published-29 Nov, 2000 | 05:00

Updated-03 Apr, 2025 | 01:03

Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.

Vendor-n/a Netscape (Yahoo Inc.)Sun Microsystems (Oracle Corporation)

Product-iplanet_certificate_management_system directory_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-0.35% / 56.65%

||

7 Day CHG~0.00%

Published-07 May, 2001 | 04:00

Updated-03 Apr, 2025 | 01:03

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.

Vendor-sco n/a Netscape (Yahoo Inc.)

Product-fasttrack_server proxy_server unixware enterprise_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-17.48% / 94.82%

||

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-03 Apr, 2025 | 01:03

Arbitrary command execution via IMAP buffer overflow in authenticate command.

Vendor-university_of_washington n/a Netscape (Yahoo Inc.)

Product-imap messaging_server n/a

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.59% / 80.92%

||

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-03 Apr, 2025 | 01:03

Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.

Vendor-bsdi n/a bsdi The MITRE Corporation (Caldera)Netscape (Yahoo Inc.)NEC Corporation Internet Systems Consortium, Inc.Red Hat, Inc.

Product-bsd_os goah_intrasv news_server linux inn openlinux goah_networksv n/a bsd_os linux openlinux goah_intrasv goah_networksv news_server inn

CWE ID-CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')