PT-2001-1099 · Netscape+1 · Netscape Proxy Server+3

Published 2001-03-12 · Updated 2008-09-05 · CVE-2000-0308

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netscape FastTrack Server versions 2.x Netscape Enterprise Server version 2.0 Netscape Proxy Server version 2.5

Description The issue is related to insecure file permissions, which can allow an attacker to gain root privileges. This affects systems running on SCO UnixWare 7.0.x and 2.1.3.

Recommendations For Netscape FastTrack Server versions 2.x, update the file permissions to secure them. For Netscape Enterprise Server version 2.0, adjust the file permissions to prevent unauthorized access. For Netscape Proxy Server version 2.5, modify the file permissions to restrict access and prevent privilege escalation.

Fix

Related Identifiers

CVE-2000-0308

Affected Products

Netscape Enterprise Server

Netscape Fasttrack Server

Netscape Proxy Server

Sco Unixware

References · 3

• ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2000-0308 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0308 · Note