Дырка в iPlanet (SHTML parsing)

Переполнение буфера при запросе к .shtml- файлу определенной длинны...

Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module

S.A.F.E.R. Security Bulletin 001026.EXP.1.8 TITLE : Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module DATE : October 26, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Confirmed on Solaris, Linux and Windows NT PROBLEM: Buffer overflow exists in iPlane...

[CORE SDI ADVISORY] iPlanet Certificate Management System 4.2 path traversal bug

CORE SDI http://www.core-sdi.com Vulnerability Report For iPlanet CMS and Netscape Directory Server Date Published: 2000-10-26 Advisory ID: CORE-2000-10-26 Bugtraq ID: 1839 CVE CAN: Non currently assigned. Title: Path traversal and administrator password in clear text vulnerabilities Class: Acces...

iPlanet Web Server shtml File Handling Remote Overflow

It is possible to make the remote iPlanet web server execute arbitrary code when requesting a too long .shtml file with a name longer than 800 chars and containing computer code. An attacker may use this flaw to gain a shell on this host C Tenable Network Security, Inc. include"compat.inc"; if...

iPlanet Certificate Management System 4.2 - Directory Traversal

source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of "../" in a HTTP request. The following service...

iPlanet Certificate Management System 4.2 - Directory Traversal

iPlanet Certificate Management System 4.2 - Directory Traversal source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible...

Netscape iCal 2.1 Patch2 - iPlanet iCal iplncal.sh Permissions

Netscape iCal 2.1 Patch2 - iPlanet iCal iplncal.sh Permissions source: https://www.securityfocus.com/bid/1768/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain versions of iCal sh...

Netscape iCal 2.1 Patch2 - iPlanet iCal 'iplncal.sh' Permissions

source: https://www.securityfocus.com/bid/1768/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain versions of iCal ship with a vulnerability introduced in the installation process...

Netscape iCal 2.1 Patch2 - iPlanet iCal csstart Local Privilege Escalation

Netscape iCal 2.1 Patch2 - iPlanet iCal csstart Local Privilege Escalation source: https://www.securityfocus.com/bid/1769/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain version...

CVE-2000-0182

The affected software is iPlanet Web Server 4.1. The vulnerability (CVE-2000-0182) allows a remote attacker to cause a denial of service by issuing a large number of GET commands, leading to memory exhaustion and a kernel panic. The OpenVAS/PT Security entries corroborate the DoS impact via exces...

CVE-2000-0182

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic...

CVE-2000-0182: Undefined Security Weakness

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic...

iplanet.dos.txt

Hello, I could find out the denial of service effected to iPlanet Web Server, Enterprise Edition 4.1 on Linux 2.2.5Redhat6.1J; Kernel 2.2.12. When I tried to send the request "GET" of seven hundred times your product consumed all memory resouce and karnel paniced. The size of GET command to your...

CVE-2000-0182

iPlanet Web Server 4.1 allows remote attackers to cause a denial of service via a large number of GET commands, which consumes memory and causes a kernel panic...

PT-2000-1165 · Oracle · Iplanet Web Server

Name of the Vulnerable Software and Affected Versions: iPlanet Web Server version 4.1 Description: The issue allows remote attackers to cause a denial of service by sending a large number of GET commands, which consumes memory and causes a kernel panic. Recommendations: For iPlanet Web Server...