CVE-2002-0787

The CVE-2002-0787 entry describes a cross-site scripting vulnerability in the iCon administrative web server for Critical Path inJoin Directory Server 4.0. The issue arises from reflected XSS via modified administrator URLs using the LOCID or OC parameters, allowing remote attackers to execute sc...

CVE-2001-1314

The CVE-2001-1314 issue affects Critical Path components InJoin Directory Server and LiveContent Directory. The root cause is a buffer overflow in the LDAP handling code, demonstrated by PROTOS LDAPv3 tests. Consequences documented include remote denial of service (crash) and potential arbitrary ...

CVE-2002-0786

The CVE-2002-0786 entry concerns the iCon administrative web server for Critical Path inJoin Directory Server 4.0. Affected component: the inJoin Directory Server 4.0 web interface (iCon admin). Vulnerability: authenticated inJoin administrators can read arbitrary files by specifying the target f...

CVE-2001-1315

The CVE-2001-1315 issue affects Critical Path’s InJoin Directory Server and LiveContent Directory. The vulnerability arises in the LDAP handling code, specifically through malformed BER encodings used in the PROTOS LDAPv3 test suite, which can be exploited remotely to trigger a crash (DoS) and ma...