CVE-2002-0686

The CVE-2002-0686 entry describes a remote code execution condition in the search component of Sun iPlanet Web Server 4.1 and Sun ONE Web Server 6.0 caused by a buffer overflow when processing a long value for the NS-rel-doc-name parameter. Affected products expose this through the search engine,...

iPlanet Remote File Viewing

Sun iPlanet Web Server Remote File Viewing Vulnerability Vendor: Sun Microsystems Product: iPlanet Web Server 6.0 SP2 iPlanet Web Server 4.1 SP9 Netscape Enterprise Server 3.6 Platforms: Windows 2000 Windows NT Other platforms not tested Category: Information Leak Author: [email protected]...

Buffer overflow in iPlanet Web Server

Buffer overflow and directory traversal in NS-rel-doc-name header if search capabilities are turned on...

iPlanet Search Engine search CGI Arbitrary File Access

An attacker may be able to read arbitrary files on the remote web server, using the 'search' CGI that comes with iPlanet. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson Added BugtraqID and CAN include"compat.inc"; if description scriptid1104...

Sun iPlanet Web Server Buffer Overflow (#NISR09072002)

NGSSoftware Insight Security Research Advisory Name: iPlanet Search Buffer Overflow Systems: iWS 6.0 and iWS 4.1 Severity: High Risk if Search enabled Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.iplanet.com/ Author: David Litchfield [email protected] Advisory URL:...

iPlanet Web Server 4.1 - Search Component File Disclosure

source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary readable files on the host running the vulnerable software to ...

iPlanet Web Server 4.1 - Search Component File Disclosure

iPlanet Web Server 4.1 - Search Component File Disclosure source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary...

CVE-2001-1368

The CVE-2001-1368 entry concerns the iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04. The vulnerability could allow attackers to corrupt data. Connected sources confirm the affected product and environment, but the provided documents do not specify a ...

CVE-2001-1368

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-1307

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1308

CVE-2001-1308 involves format-string vulnerabilities in the iPlanet Directory Server, version 4.1.4 and earlier, in the LDAP handling code. The flaws allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1306

The CVE-2001-1306 issue affects iPlanet Directory Server 4.1.4 and earlier (LDAP). The vulnerability allows a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via invalid BER length fields, as demonstrated by the PROTOS LDAPv3 test suite. Remediation (if...

CVE-2001-1308

Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1307

Vulnerability CVE-2001-1307 affects iPlanet Directory Server 4.1.4 and earlier, with buffer overflows in LDAP handling that allow remote denial of service and potentially arbitrary code execution, demonstrated by the PROTOS LDAPv3 test suite. A fix is available in iPlanet Directory Server 4.1.5 (...

CVE-2001-0327

The CVE-2001-0327 issue affects iPlanet Web Server Enterprise Edition 4.1 and earlier. It is an information-disclosure vulnerability in which a remote attacker can exploit a crafted URL-encoded Host: header in HTTP requests, causing the server to reveal data from memory in the Location: header. R...

CVE-2001-0327

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server...

CVE-2001-0252

CVE-2001-0252 affects iPlanet (Netscape) Enterprise Server 4.1. A remote attacker can trigger a denial of service by sending a long HTTP GET request containing many "/../" sequences, leading to server instability. The vulnerability is described across multiple sources (NVD/CVE entries and Nessus/...

CVE-2001-0252

iPlanet formerly Netscape Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" dot dot sequences...

iPlanet Web Server and Netscape Enterprise Server Web Publisher commands allow directory enumeration

Overview A vulnerability exists in iPlanet Web Server and Netscape Enterprise Server in which Web Publisher commands can be used to obtain directory listings. Description iPlanet Web Server and Netscape Enterprise Server permit unauthenticated remote users to enumerate server directories via Web...