283 matches found
CVE-2010-3545
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...
Design/Logic Flaw
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...
Cross site request forgery (csrf)
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October...
CVE-2010-3545
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Administration...
CVE-2010-3544
CVE-2010-3544 is a CSRF vulnerability in Oracle iPlanet Web Server (Sun Java System Web Server) prior to 7.0U9 that allows an attacker to stop a server instance via the management console when a user views a malicious page while authenticated. The issue is documented across multiple sources (JVN/...
CVE-2010-3545
CVE-2010-3545 affects Oracle iPlanet Web Server (Sun Java System Web Server), part of Oracle Sun Product Suite 7.0. The vulnerability is in the Administration component and allows remote attackers to affect confidentiality and integrity via unknown vectors. Public sources in connected docs corrob...
CVE-2010-3544
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect integrity and availability via unknown vectors related to Administration. NOTE: the previous information was obtained from the October...
CVE-2010-3514
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...
CVE-2010-3512
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
Design/Logic Flaw
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
Design/Logic Flaw
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...
CVE-2010-3514
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...
CVE-2010-3512
CVE-2010-3512 affects Oracle iPlanet Web Server (Sun Java System Web Server) 7.0u8. The vulnerability is an unspecified issue in the WebDAV-related functionality that could allow remote authenticated users to affect confidentiality. The NVD entry describes an unspecified vulnerability in the WebD...
CVE-2010-3512
Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...
CVE-2010-3514
CVE-2010-3514 affects Oracle iPlanet Web Server (Sun Java System Web Server) 7.0.x prior to 7.0.9. The vulnerability is in the Web Container and enables HTTP response splitting via crafted responses (CR/LF handling in headers). CVSS 2.0 base score is 4.3 (Network, Medium complexity, no auth; inte...
CVE-2003-1589
CVE-2003-1589 affects Sun ONE (iPlanet) Web Server on Windows, specifically versions 4.1 before SP13 and 6.0 before SP6. The vulnerability is described as unspecified and leads to a denial of service (daemon crash) via unknown vectors. The available references reiterate the DoS impact but do not ...
CVE-2003-1590
CVE-2003-1590 concerns Sun ONE (iPlanet) Web Server 6.0 SP3–SP5 on Windows, described as an unspecified vulnerability that allows remote attackers to trigger a denial of service (daemon crash) via unknown vectors. The available records do not specify the exact root cause, impacted subcomponents, ...
CVE-2003-1577
Sun ONE aka iPlanet Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting XSS attacks involving the iPlanet Log Analyzer, via an HTTP request in...
CVE-2003-1579
CVE-2003-1579 affects Sun ONE (iPlanet) Web Server 6 on Windows. When DNS resolution is enabled for client IPs, the logging format does not clearly indicate if a dotted quad is unresolved, enabling remote attackers to spoof IPs via crafted DNS responses containing numerical top-level domains (ILL...
CVE-2003-1578
The CVE-2003-1578 entry concerns Sun ONE (iPlanet) Web Server 4.1–SP12 and 6.0–SP5 when DNS resolution is enabled for client IPs. The underlying issue, described as an Inverse Lookup Log Corruption (ILLC) vulnerability, allows remote attackers to hide HTTP requests from the log-preview functional...