This CPE summary could be partial or incomplete. Please contact us for a detailed listing.
Summary
| Detail | |||
|---|---|---|---|
| Vendor | Sun | First view | 2001-08-22 |
| Product | Iplanet Web Server | Last view | 2007-01-12 |
| Version | 4.1 | Type | Application |
| Update | * | ||
| Edition | * | ||
| Language | * | ||
| Sofware Edition | * | ||
| Target Software | * | ||
| Target Hardware | * | ||
| Other | * | ||
| CPE Product | cpe:2.3:a:sun:iplanet_web_server | ||
Activity : Overall
Related : CVE
| Date | Alert | Description | |
|---|---|---|---|
| 6.8 | 2007-01-12 | CVE-2007-0183 | Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. |
| 5 | 2002-10-04 | CVE-2002-1042 | Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter. |
| 5 | 2001-08-22 | CVE-2001-0606 | Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. |
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 32662 | iPlanet Web Server /search NS-max-records XSS |
| 9617 | HP-UX iPlanet Web Server with VirtualVault HTTPS Remote DoS |
| 846 | iPlanet/One Web Server search Arbitrary File Access |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | iPlanet Search directory traversal attempt RuleID : 1828-community - Type : SERVER-WEBAPP - Revision : 16 |
| 2014-01-10 | iPlanet Search directory traversal attempt RuleID : 1828 - Type : SERVER-WEBAPP - Revision : 16 |
Nessus® Vulnerability Scanner
| id | Description |
|---|---|
| 2002-07-10 | Name: The remote web server is hosting a CGI application that is affected by an inf... File: iplanet_search.nasl - Type: ACT_ATTACK |
