CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
83.1%
Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
Vendor | Product | Version | CPE |
---|---|---|---|
netscape | communicator | * | cpe:2.3:a:netscape:communicator:*:*:*:*:*:*:*:* |
netscape | navigator | * | cpe:2.3:a:netscape:navigator:*:*:*:*:*:*:*:* |
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:66.netscape.asc
distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000344
lists.suse.com/archives/suse-security-announce/2000-Nov/0005.html
marc.info/?l=bugtraq&m=97500270012529&w=2
www.osvdb.org/7207
www.redhat.com/support/errata/RHSA-2000-109.html
exchange.xforce.ibmcloud.com/vulnerabilities/5542