This software is used administratively on some NT and Win2K systems. A bug in several components of the Netscape Servers suite of products allows and attacker to successfully conduct a denial of service attack against the vulnerable systems. The Netscape Certificate Management System has also several server components that share the problem. An exploitable heap buffer overflow vulnerability was discovered in the Netscape Directory Server product. The Netscape Certificate Management System also has several server components that share the problem.
Vulnerable systems allow the execution of arbitrary code as the user running the services.
The company tried to track the intruder on its own, sources said, but had little luck determining where commands were coming from. The FBI is now investigating this breach. Using specially designed URLs, IIS 5.0 may return user specified content to the browser. By clicking on links, just visiting hostile web pages or opening HTML email the target IIS sever may return user defined malicious active content. A new trojan horse named Godmessage Worm v0.1 was discovered by Astonsoft developers.