iPlanet Web Server Enterprise Edition and Netscape Enterprise Server malformed Web Publisher command causes denial-of-service

Overview A vulnerability exists in iPlanet Web Server, Enterprise Edition and Netscape Enterprise Server in which a malformed Web Publisher command can crash the web server process. This vulnerability only affects Windows NT based servers. Description ProCheckup has reported a vulnerability in...

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server Web Publisher command exposes server to brute force attack

Overview A vulnerability exists in iPlanet Web Server Enterprise Edition and Netscape Enterprise Server that allows an attacker to make repeated authentication attempts if a server is configured to use HTTP basic authentication. While the risk is not greater than any other brute force attack usin...

CVE-2001-0746

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with 1 GETPROPERTIES, 2 GETATTRIBUTENAMES, or other methods...

CVE-2001-0747

Buffer overflow in iPlanet Web Server iWS Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request...

CVE-2001-0747

The provided sources describe CVE-2001-0747 as a buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1 on SP3–SP7, exploitable via a long method name in an HTTP request. This leads to denial of service and may allow arbitrary code execution. Affected product details come from the NVD...

CVE-2001-0746

The CVE-2001-0746 issue is a buffer overflow in the Web Publisher component of iPlanet Web Server Enterprise Edition 4.1 and earlier. An attacker can trigger this by sending a long URI in requests for certain methods (notably GETPROPERTIES and GETATTRIBUTENAMES), potentially causing a denial of s...

CVE-2001-0746

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with 1 GETPROPERTIES, 2 GETATTRIBUTENAMES, or other methods...

CVE-2001-0747

Buffer overflow in iPlanet Web Server iWS Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request...

[SNS Advisory No.41] iPlanet Messaging Server 5.1(evaluation copy) Buffer Overflow Vulnerability

---------------------------------------------------------------------- SNS Advisory No.41 iPlanet Messaging Server 5.1evaluation copy Buffer Overflow Vulnerability Problem first discovered: 6 Aug 2001 Published: Mon, 3 Sep 2001 ---------------------------------------------------------------------...

Переполнение буфера в iPlanet Messaging Server (buffer overflow)

Переполнение буфера при разборе имени пользователя в утилите удаленного администрирования...

CVE-2001-0606

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...

CVE-2001-0620

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server NAS LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions...

CVE-2001-0620

CVE-2001-0620 affects iPlanet Calendar Server 5.0p2 and earlier. The vulnerability arises because the configuration file stores the Netscape Admin Server (NAS) LDAP credential in cleartext with insecure permissions, allowing a local attacker to obtain the administrator username and password, gain...

CVE-2001-0606

The CVE-2001-0606 entry concerns iPlanet Web Server 4.X on HP-UX 11.04 (VVOS) with VirtualVault A.04.00, where a remote attacker can cause a denial of service via the HTTPS service. The connected sources (NVD/CVE records) provide the affected product and the vulnerability class (remote DoS over H...

CVE-2001-0606

Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 VVOS with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service...

iPlanet Directory Server contains multiple vulnerabilities in LDAP handling code

Overview The iPlanet Directory Server contains vulnerabilities that may allow denial-of-service attacks, unauthorized privileged access, or both. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product,...

CVE-2001-1307

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1308

Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-0419

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server iWS 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/...