Netscape vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2008-1676 Red Hat PKI Common Framework (rhpki-common) in Red Hat Certificate System (aka Certificate Server or RHCS) 7.1 through 7.3, and Netscape Certificate Management High 7.5 · Jul 7, 2008
• CVE-2004-1160 Netscape 7.x to 7.2, and possibly other versions, allows remote attackers to spoof arbitrary web sites by injecting content from one window into a target windowHigh 7.5 · Jan 10, 2005
• CVE-2004-1236 Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary High 10 · Dec 31, 2004
• CVE-2003-0553 Buffer overflow in the Client Detection Tool (CDT) plugin (npcdt.dll) for Netscape 7.02 allows remote attackers to execute arbitrary code via an attachment withHigh 7.5 · Aug 18, 2003
• CVE-2002-2248 Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an apHigh 10 · Dec 31, 2002
• CVE-2001-0596 Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.High 7.5 · Aug 2, 2001
• CVE-2001-0262 Buffer overflow in Netscape SmartDownload 1.3 allows remote attackers (malicious web pages) to execute arbitrary commands via a long URL.High 7.5 · Jul 2, 2001
• CVE-2001-0164 Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformedHigh 7.5 · Jun 2, 2001
• CVE-2000-0308 Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gaHigh 10 · Mar 12, 2001
• CVE-2000-1187 Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form fieldHigh 7.5 · Jan 9, 2001
• CVE-2000-0961 Buffer overflow in IMAP server in Netscape Messaging Server 4.15 Patch 2 allows local users to execute arbitrary commands via a long LIST command.High 10 · Dec 19, 2000
• CVE-2000-1071 The GUI installation for iCal 2.1 Patch 2 disables access control for the X server using an "xhost +" command, which allows remote attackers to monitor X WindowHigh 10 · Dec 11, 2000
• CVE-2000-1072 iCal 2.1 Patch 2 installs many files with world-writeable permissions, which allows local users to modify the iCal configuration and execute arbitrary commands High 7.2 · Dec 11, 2000
• CVE-2000-1073 csstart program in iCal 2.1 Patch 2 searches for the cshttpd program in the current working directory, which allows local users to gain root privileges by creatHigh 7.2 · Dec 11, 2000
• CVE-2000-1074 csstart program in iCal 2.1 Patch 2 uses relative pathnames to install the libsocket and libnsl libraries, which could allow the icsuser account to gain root prHigh 10 · Dec 11, 2000
• CVE-2000-1076 Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possHigh 10 · Dec 11, 2000
• CVE-2000-0600 Netscape Enterprise Server in NetWare 5.1 allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed URL.High 7.5 · Jun 26, 2000
• CVE-2000-0577 Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a ..High 10 · Jun 21, 2000
• CVE-1999-0744 Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.High 7.5 · Jan 4, 2000
• CVE-1999-0853 Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication proceduHigh 10 · Dec 1, 1999
• CVE-1999-1189 Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute High 7.5 · Nov 24, 1999
• CVE-1999-1357 Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b cHigh 7.5 · Oct 5, 1999
• CVE-1999-0807 The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.High 7.2 · May 1, 1999
• CVE-1999-0440 The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.High 7.5 · Mar 1, 1999