Bugtraq mailing list archives

Updated Fix Information for Buffer Overflow in Netscape Enterprise and FastTrack Web Servers

From: xforce () ISS NET (X-Force)
Date: Thu, 2 Sep 1999 15:54:08 -0400


Updated Fix Information
September 2, 1999

Buffer Overflow in Netscape Enterprise and FastTrack Web Servers

Affected Versions:
This vulnerability was tested on Enterprise 3.6sp2 and FastTrack 3.01 for
Windows NT. Earlier versions may be vulnerable, but they were not tested.

Fix Information:

Netscape recommends users of Enterprise 3.6sp2 or previous versions
apply the patch that is bundled with the SSL Handshake fix available
from Netscape at:
http://www.iplanet.com/downloads/patches/detail_12_86.html

Netscape recommends users of FastTrack 3.01 or previous versions upgrade
to Enterprise Server 3.6 then apply the aforementioned patch.

Current thread:

limit maximum nr. of processes. Petter Wahlman (Sep 01)
- Updated Fix Information for Buffer Overflow in Netscape Enterprise and FastTrack Web Servers X-Force (Sep 02)
- Re: limit maximum nr. of processes. Alfonso Lazaro (Sep 03)
  - Re: limit maximum nr. of processes. Andrea Costantino (Sep 07)
  - ProFTP-1.2.0pre4 buffer overflow -- once more Renaud Deraison (Sep 07)
  - Exploiting DCOM to gain Administrative rights on Windows NT 4 Mnemonix (Sep 07)