283 matches found
Дырка в iPlanet Calendar (readable passwords)
Пароли администрирования хранятся в файле открытом на чтение...
iplanet calendar server 5.0p2 exposes Netscape Admin Server master password
at the time of writing, 5.0p2 is the currently available revision on iplanet's download site. the problem: the standard install of iPlanet Calendar server stores the NAS LDAP admin username and password in plaintext in the world readable file: -rw-r--r-- 1 icsuser icsgroup 37882 Feb 20 10:18...
iPlanet web servers expose sensitive data via buffer overflow
Overview A buffer overflow exists in the iPlanet Web Servers Enterprise and FastTrack Editions that may allow remote attackers to gain read access to sensitive information contained in the memory of the web server process. The information disclosed may include userids, passwords, cookies or...
Oracle Application Server shared library buffer overflow
$Id: safer0016oasadvisory.txt,v 1.3 2001/03/27 10:27:16 vanja Exp $ S.A.F.E.R. Security Bulletin 0016 TITLE : Oracle Application Server shared library buffer overflow DATE : April 10, 2001 NATURE : Remote execution of code, Denial of Service AFFECTED : Oracle application server 4.0.8.2 + iWS...
CVE-2000-1077
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension...
CVE-2000-1077
CVE-2000-1077 corresponds to a buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x. The vulnerability arises when processing a filename with a .shtml extension that is excessively long, enabling remote attackers to execute arbitrary commands. Multiple sources corroborate ...
iPlanet Directory Server Traversal Arbitrary File Access
There is a bug in the remote iPlanet web server that allows a user to read arbitrary files on the remote host. To exploit this flaw, an attacker needs to prepend '/../../' to the file name to read. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10589; scriptversion...
CVE-2000-1077
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension...
CVE-2000-1075
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. dot dot attack in the Agent, End Entity, or Administrator services...
Дырка в iPlanet (SHTML parsing)
Переполнение буфера при запросе к .shtml- файлу определенной длинны...
Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module
S.A.F.E.R. Security Bulletin 001026.EXP.1.8 TITLE : Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module DATE : October 26, 2000 NATURE : Remote execution of code, Denial-of-Service AFFECTED : Confirmed on Solaris, Linux and Windows NT PROBLEM: Buffer overflow exists in iPlane...
[CORE SDI ADVISORY] iPlanet Certificate Management System 4.2 path traversal bug
CORE SDI http://www.core-sdi.com Vulnerability Report For iPlanet CMS and Netscape Directory Server Date Published: 2000-10-26 Advisory ID: CORE-2000-10-26 Bugtraq ID: 1839 CVE CAN: Non currently assigned. Title: Path traversal and administrator password in clear text vulnerabilities Class: Acces...
iPlanet Web Server shtml File Handling Remote Overflow
It is possible to make the remote iPlanet web server execute arbitrary code when requesting a too long .shtml file with a name longer than 800 chars and containing computer code. An attacker may use this flaw to gain a shell on this host C Tenable Network Security, Inc. include"compat.inc"; if...
iPlanet Certificate Management System 4.2 - Directory Traversal
source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible through the use of "../" in a HTTP request. The following service...
iPlanet Certificate Management System 4.2 - Directory Traversal
iPlanet Certificate Management System 4.2 - Directory Traversal source: https://www.securityfocus.com/bid/1839/info Acquiring access to known files outside of the web root is possible through directory traversal techniques in both iPlanet Certificate Management System CMS. This is made possible...
Netscape iCal 2.1 Patch2 - iPlanet iCal iplncal.sh Permissions
Netscape iCal 2.1 Patch2 - iPlanet iCal iplncal.sh Permissions source: https://www.securityfocus.com/bid/1768/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain versions of iCal sh...
Netscape iCal 2.1 Patch2 - iPlanet iCal 'iplncal.sh' Permissions
source: https://www.securityfocus.com/bid/1768/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain versions of iCal ship with a vulnerability introduced in the installation process...
Netscape iCal 2.1 Patch2 - iPlanet iCal csstart Local Privilege Escalation
Netscape iCal 2.1 Patch2 - iPlanet iCal csstart Local Privilege Escalation source: https://www.securityfocus.com/bid/1769/info Netscape's iPlanet iCal application is a network based calendar service built for deployment in organizations which require a centralized calendar system. Certain version...
CVE-2000-0182
The affected software is iPlanet Web Server 4.1. The vulnerability (CVE-2000-0182) allows a remote attacker to cause a denial of service by issuing a large number of GET commands, leading to memory exhaustion and a kernel panic. The OpenVAS/PT Security entries corroborate the DoS impact via exces...