CVE-2002-1655

The CVE-2002-1655 entry affects the Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x. The vulnerability allows remote attackers to cause a denial of service (crash) via a wp-html-rend request. No remediation details, exploit status, or additional impact informat...

CVE-2002-1654

The CVE affects iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1. A flaw allows remote attackers to initiate HTTP Basic Authentication through the wp-force-auth Web Publisher command, creating a distinct attack vector and potentially making brute-force password gue...

CVE-2002-1655

The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service crash via a wp-html-rend request...

CVE-2002-1654

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing withou...

CVE-2003-1126

Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service...

CVE-2003-1126

CVE-2003-1126 affects Sun One/iPlanet Web Server running on Windows platforms with SP3–SP5. The vulnerability permits remote denial of service, as described in multiple sources. The connected documents provide the same general impact and do not specify affected product versions beyond SP3–SP5 or ...

HP-UX PHSS_23215 : HPSBUX0102-139 Sec. Vulnerability in iPlanet 4.X in VV4.0 (rev.1)

s700800 11.04 VirtualVault 4.0 US/Canada iWS 4.1 SP5 : Potential HTTPS instability with iPlanet 4.X in VirtualVault 4.0. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS23215. The text itself is copyright C...

HP-UX PHSS_24108 : HPSBUX0106-152 Security Vul. in Virtualvault 4.0 w/ iPlanet WS (rev.1)

s700800 11.04 VirtualVault 4.0 iWS 4.1 NSAPI module : The iPlanet Web Server included in Virtualvault 4.0 product contains a vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and patch checks in this plugin were extracted from HP patch PHSS24108. The text...

iPlanet Web Server < 4.1 SP7 URL-Encoded Host: Information Disclosure

Binary data 2181.prm...

iPlanet Web Server Enterprise Edition URL-encoded Host: Information Disclosure

According to its self reported version number, the remote iPlanet web server is affected by an information disclosure vulnerability wherein a remote user can retrieve sensitive data from memory allocation pools or cause a denial of service against the server. Since Nessus solely relied on the...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 aka Sun ONE allows remote attackers to read arbitrary files via "..%2f" partially encoded dot dot sequences...

CVE-2003-0676

CVE-2003-0676 : A directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (Sun ONE) allows remote attackers to read arbitrary files via partially encoded dot-dot sequences ("..%2f"). The information available confirms the affected component and the underlying issue is a...

Directory Traversal in Sun iPlanet Administration Server 5.1

Text of original posting to Sun: Originator: EDS Information Assurance Group - Jim Hardisty, Mark Brewis Date of Contact: 22nd April 2003 Issue:During a recent Penetration Test, a member of the team, Jim Hardisty, identified an issue with an installation of iPlanet Administration Express. It is...

iPlanet Administration Server directory traversal

Directory traversal during log view with 2f...

iPlanet Messaging Server 5.0/5.1 - HTML Attachment Cross-Site Scripting

source: https://www.securityfocus.com/bid/7704/info It has been reported that iPlanet Messaging Server may be prone to cross-site scripting attacks. The problem is said to occur while processing HTML attachments received via e-mail. If successfully exploited, a malicious HTML file may be used to...

iPlanet Messaging Server 5.05.1 - HTML Attachment Cross-Site Scripting

iPlanet Messaging Server 5.05.1 - HTML Attachment Cross-Site Scripting source: https://www.securityfocus.com/bid/7704/info It has been reported that iPlanet Messaging Server may be prone to cross-site scripting attacks. The problem is said to occur while processing HTML attachments received via...

CVE-2002-0845

CVE-2002-0845 affects Sun ONE / iPlanet Web Server 4.1 and 6.0. The vulnerability is a buffer overflow in the Chunked Encoding processing, allowing a remote attacker to execute arbitrary code via an HTTP request that uses chunked transfer encoding. Affected components are the web server’s HTTP pr...

Sun ONE (iPlanet) Application Server Detection

The remote host is running Sun ONE Application Server formerly known as iPlanet Application Server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; ifdescription scriptid11402; scriptversion"1.19";...

Netscape / iPlanet .perf Remote Information Disclosure

Requesting the URI /.perf gives information about the currently running Netscape/iPlanet web server. This script was written by Sullo [email protected] Changes by Tenable: - Changed family, output formatting 9/2/09 - Revised plugin title 9/18/09 - Replaced URL 6/4/13 include"compat.inc"; ifdescripti...