CVE-2002-1042

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...

CVE-2002-1042: Undefined Security Weakness

Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ dot-dot backslash sequences in the NS-query-pat parameter...

Immunity Canvas: IPLANET_CHUNKED

Name| iplanetchunked ---|--- CVE| CVE-2002-0845 Exploit Pack| CANVAS Description| iPlanet Chunked Encoding Notes| References: http://www.sun.com/service/sunone/software/alerts/transferencodingalert-23july2002.html http://www.eeye.com/html/Research/Advisories/AD20020808a.html CVE Name: CVE-2002-08...

EEYE: Sun(TM) ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow

SunTM ONE / iPlanet Web Server 4.1 and 6.0 Remote Buffer Overflow Release Date: August 8, 2002 Severity: High Remote SYSTEM/ROOT Systems Affected: iPlanet 6.0 and prior Description: A vulnerability in transfer chunking can be exploited to remotely execute code of an attacker's choice on a...

iPlanet Chunked Encoding Processing Remote Overflow

This host is running the Sun One/iPlanet web server 4.1 or 6.0. This web server contains an unchecked buffer in the 'Chunked Encoding' processing routines. By issuing a malformed request to the web server, a potential intruder can 'POST' extraneous data and cause the web server process to execute...

iPlanet vulnerabilities on IRIX

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: iPlanet vulnerabilities Number: 20020803-01-P Date: August 1, 2002 Reference: CERT® Vulnerability Note 276767 Reference: CAN-2001-0327 - ----------------------- - --- Issue Specifics --- - ----------------------- Multiple...

CVE-2002-0686

Buffer overflow in the search component for iPlanet Web Server iWS 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter...

Sun iPlanet and ONE Web Servers contain a buffer overflow in the search engine

Overview The Sun iPlanet Web Server and Sun ONE Web Server both ship with a search engine that is not enabled by default. A remotely exploitable buffer overflow exists in the search engine that could permit an attacker to execute arbitrary code on the system. Description The Sun iPlanet Web Serve...

CVE-2002-0686

The CVE-2002-0686 entry describes a remote code execution condition in the search component of Sun iPlanet Web Server 4.1 and Sun ONE Web Server 6.0 caused by a buffer overflow when processing a long value for the NS-rel-doc-name parameter. Affected products expose this through the search engine,...

CVE-2002-0686: Undefined Security Weakness

Buffer overflow in the search component for iPlanet Web Server iWS 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter...

iPlanet Remote File Viewing

Sun iPlanet Web Server Remote File Viewing Vulnerability Vendor: Sun Microsystems Product: iPlanet Web Server 6.0 SP2 iPlanet Web Server 4.1 SP9 Netscape Enterprise Server 3.6 Platforms: Windows 2000 Windows NT Other platforms not tested Category: Information Leak Author: [email protected]...

Buffer overflow in iPlanet Web Server

Buffer overflow and directory traversal in NS-rel-doc-name header if search capabilities are turned on...

iPlanet Search Engine search CGI Arbitrary File Access

An attacker may be able to read arbitrary files on the remote web server, using the 'search' CGI that comes with iPlanet. C Tenable Network Security, Inc. Script audit and contributions from Carmichael Security Erik Anderson Added BugtraqID and CAN include"compat.inc"; if description scriptid1104...

iPlanet Web Server 4.1 - Search Component File Disclosure

iPlanet Web Server 4.1 - Search Component File Disclosure source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary...

iPlanet Web Server 4.1 - Search Component File Disclosure

source: https://www.securityfocus.com/bid/5191/info The iPlanet Web Server search engine is prone to a file disclosure vulnerability. It is possible for remote attackers to make requests to the search engine which will cause arbitrary readable files on the host running the vulnerable software to ...

Sun iPlanet Web Server Buffer Overflow (#NISR09072002)

NGSSoftware Insight Security Research Advisory Name: iPlanet Search Buffer Overflow Systems: iWS 6.0 and iWS 4.1 Severity: High Risk if Search enabled Category: Remote Buffer Overrun Vulnerability Vendor URL: http://www.iplanet.com/ Author: David Litchfield [email protected] Advisory URL:...

CVE-2001-1368

The CVE-2001-1368 entry concerns the iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04. The vulnerability could allow attackers to corrupt data. Connected sources confirm the affected product and environment, but the provided documents do not specify a ...

CVE-2001-1368

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-1368: Undefined Security Weakness

Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System VVOS 4.0 running HP-UX 11.04 could allow attackers to corrupt data...

CVE-2001-1307

Buffer overflows in iPlanet Directory Server 4.1.4 and earlier LDAP allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...