CVSS: 6.1EPSS: 0%CPEs: 47EXPL: 1CVE-2004-2763
https://notcve.org/view.php?id=CVE-2004-2763
01 Jun 2009 — The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting. La configuración por defecto de Sun ONE/iPlanet Web Server v4.1 SP! al SP2 y v6.0 SP1 al SP5 responde a las peticiones HTTP TRACE, lo que puede permitir a atacantes remotos el robo de información usando ataques de seguimi... • http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html • CWE-16: Configuration •
CVSS: 6.8EPSS: 3%CPEs: 21EXPL: 2CVE-2007-0183 – iPlanet Web Server 4.1 - Search Module Cross-Site Scripting
https://notcve.org/view.php?id=CVE-2007-0183
11 Jan 2007 — Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the NS-max-records parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en /search en iPlanet Web Server 4.x permite a atacantes remotos inyectar scripts web o HTML de su elección a través del parámetro NS-max-records. NOTA: El ... • https://www.exploit-db.com/exploits/29439 •
CVSS: 6.8EPSS: 2%CPEs: 12EXPL: 4CVE-2002-1315
https://notcve.org/view.php?id=CVE-2002-1315
21 Nov 2002 — Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316). Vulnerabilidad de scripting en sitios cruzados (XSS) en el Servidor de Administración de iPlanet WebServer 4.x, hasta SP11, permite a usuarios remotos ejecutar scr... • http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html •
CVSS: 9.6EPSS: 1%CPEs: 12EXPL: 1CVE-2002-1316
https://notcve.org/view.php?id=CVE-2002-1316
21 Nov 2002 — importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315). importInfo en el Servidor de Administración de iPlanet WebServer 4.x hasta SP11, permite al adminstrador del web ejecutar comandos arbitrarios mediante metacaractéres de shell en el parámetro dir, y posiblemente permita a ataca... • http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html •
CVSS: 7.5EPSS: 7%CPEs: 26EXPL: 2CVE-2002-1042 – iPlanet Web Server 4.1 - Search Component File Disclosure
https://notcve.org/view.php?id=CVE-2002-1042
31 Aug 2002 — Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter. • https://www.exploit-db.com/exploits/21603 •
CVSS: 9.8EPSS: 3%CPEs: 2EXPL: 0CVE-2002-0845
https://notcve.org/view.php?id=CVE-2002-0845
12 Aug 2002 — Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding. • http://marc.info/?l=bugtraq&m=102890933623192&w=2 •
CVSS: 9.8EPSS: 4%CPEs: 2EXPL: 0CVE-2002-0686
https://notcve.org/view.php?id=CVE-2002-0686
15 Jul 2002 — Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter. Desbordamiento de búfer en la búsqueda de componentes para iPlanet Web Server (iWS) 4.1 y 6.0 permite a atacantes remotos la ejecución arbitraria de código mediante un argumento largo en el parámetro NS-rel-doc-name. • http://marc.info/?l=bugtraq&m=102622220416889&w=2 •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2001-0747
https://notcve.org/view.php?id=CVE-2001-0747
12 Oct 2001 — Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request. • http://archives.neohapsis.com/archives/bugtraq/2001-05/0203.html •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2001-0606
https://notcve.org/view.php?id=CVE-2001-0606
27 Jul 2001 — Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service. • http://archives.neohapsis.com/archives/hp/2001-q1/0041.html •
CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 0CVE-2001-0327
https://notcve.org/view.php?id=CVE-2001-0327
02 Jul 2001 — iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server. • http://www.atstake.com/research/advisories/2001/a041601-1.txt •