iPlanet Web Server 4.1 - Search Module Cross-Site Scripting

source: https://www.securityfocus.com/bid/21977/info iPlanet Web Server is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...

CVE-2006-5652

Cross-site scripting XSS vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related ...

CVE-2006-5652

Cross-site scripting XSS vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related ...

CVE-2006-5652

Technical details for CVE-2006-5652 are not publicly available in the provided documents. Monitor for updates.

Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

iPlanet Messaging Server - Messenger Express Expression HTML Injection source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit...

iPlanet Messaging Server - Messenger Express Expression() HTML Injection

source: https://www.securityfocus.com/bid/20838/info iPlanet Messaging Server Messenger Express is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker can exploit this issue to execute arbitrary JavaScript in the victim's browser...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

CVE-2006-5486

Cross-site scripting XSS vulnerability in Webmail in Sun Java System Messaging Server 6.0 through 6.2 and iPlanet Messaging Server 5.2 allows remote attackers to execute arbitrary Javascript via crafted messages...

CVE-2006-5486

CVE-2006-5486: Cross-site scripting in Webmail of Sun Java System Messaging Server 6.0–6.2 and iPlanet Messaging Server 5.2. Remote attackers can trigger arbitrary Javascript via crafted e-mails. Affected: Webmail component of Sun/ iPlanet Messaging Server. Root cause described as XSS via crafted...

CVE-2006-3159

CVE-2006-3159 affects Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16. The flaw allows a local user to read portions of restricted files via a symlink attack on msg.conf in a directory defined by the CONFIGROOT environment variable, with the error message returning the first line of the target f...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure

Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messaging Server is a software product that provides a centralized location for...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 Root Password Disclosure

Exploit for multiple platform in category local exploits ===================================================================== Sun iPlanet Messaging Server 5.2 HotFix 1.16 Root Password Disclosure ===================================================================== Date: 14 Jun 2006 Vendor: Sun...

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure

Sun iPlanet Messaging Server 5.2 HotFix 1.16 - Root Password Disclosure Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messagi...

Sun iPlanet symbolic links problem

pipemaster suid root application tries to read configuration from msg.conf file with relative path without checking for symbolic links. It makes it possible to read few trings from any file with symbolic link...

[Full-disclosure] Sun iPlanet Messaging Server 5.2 root password compromise

Summary ---------------- Date: 14 Jun 2006 Vendor: Sun Microsystems, Inc. Name: iPlanet Messaging Server Version: 5.2 HotFix 1.16 built May 14 2003 Vuln: msg.conf symlink attack Severity: high Software description ---------------- The iPlanet Messaging Server is a software product that provides a...

Web Server / Application favicon.ico Vendor Fingerprinting

The 'favicon.ico' file found on the remote web server belongs to a popular web server. This may be used to fingerprint the web server. This script was written by Javier Fernandez-Sanguino based on sample code written by Renaud Deraison in the nessus-plugins mailing list It is distributed under th...

CVE-2001-1510

The CVE-2001-1510 entry concerns Allaire JRun versions 2.3.3, 3.0 and 3.1 running on IIS 4.0/5.0, iPlanet, Apache, JRun Web Server (JWS) and possibly other web servers. Affected component: the web server handling of certain crafted URLs, where appending one of three fragments ("%3f.jsp", "?.jsp",...

CVE-2005-2022

Technical details about CVE-2005-2022 are not publicly available in the provided documents; no confirmed affected versions, root cause, impact, or remediation are disclosed beyond the brief description. Monitor for updates.

CVE-2005-2022

Unknown vulnerability in Webmail in iPlanet Messaging Server 5.2 Patch 1 and Sun ONE Messaging Server 6.2 allows remote attackers to execute arbitrary Javascript, possibly due to a cross-site scripting XSS vulnerability...