The caching module in Netscape Fasttrack Server 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by requesting a large number of non-existent URLs.
Product
netscape fasttrack server vulnerabilities
8 published CVES affecting netscape fasttrack server, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 0
- High
- 4
- Medium
- 4
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest netscape fasttrack server CVEs
Newest publication first
-
MediumCVSS 5.0 EPSS 2.5%
-
HighCVSS 10.0 EPSS 2.2%
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
-
MediumCVSS 5.0 EPSS 1.9%
Netscape Enterprise 3.5.1 and FastTrack 3.01 servers allow a remote attacker to view source code to scripts by appending a %20 to the script's URL.
-
HighCVSS 10.0 EPSS 3.4%
Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges via the HTTP Basic Authentication procedure.
-
HighCVSS 7.5 EPSS 2.5% Public exploit PoC
Buffer overflow in Netscape Enterprise Server and FastTrask Server allows remote attackers to gain privileges via a long HTTP GET request.
-
MediumCVSS 5.0 EPSS 8.5%
Information from SSL-encrypted sessions via PKCS #1.
-
MediumCVSS 5.0 EPSS 18.5%
Some web servers under Microsoft Windows allow remote attackers to bypass access restrictions for files with long file names.
-
HighCVSS 7.5 EPSS 7.6% Public exploit
Netscape FastTrack Web server lists files when a lowercase "get" command is used instead of an uppercase GET.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.