Netscape Directory Server — known CVE vulnerabilities

Every CVE whose affected-product data names Netscape Directory Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2000-1076 — CVSS 10.0 (critical): Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could…
• CVE-2004-1236 — CVSS 10.0 (critical): Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers…
• CVE-2001-0164 — CVSS 7.5 (high): Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary…
• CVE-2004-0826 — CVSS 7.5 (high): Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a…
• CVE-1999-0807 — CVSS 7.2 (high): The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users.
• CVE-2000-1075 — CVSS 5.0 (medium): Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read…
• CVE-1999-0007 — CVSS 5.0 (medium): Information from SSL-encrypted sessions via PKCS #1.