GCVE - cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:one_web_server:6.1:sp1:*:*:*:*:*:*

part: a version: 6.1 update: sp1

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	One Web Server (`b1bb3f1d-17e0-5a5f-907f-75a2d36e6839`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-2094`	vulnerable	2026-06-08 04:48:28.330422	Details available Sun SunONE web server 6.1 SP1 allows remote attackers to poison the web cache, bypass web application firewall protection, and conduct XSS attacks via an HTTP request with both a "Transfer-Encoding: chunked" header and a Content-Length header, which causes SunONE to incorrectly handle and forward the body of the request in a way that causes the receiving server to process it as a separate HTTP request, aka "HTTP Request Smuggling." Published: 2005-06-30T04:00:00.000Z Updated: 2024-08-07T22:15:37.439Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1014369 https://exchange.xforce.ibmcloud.com/vulnerabilities/42903 http://www.securiteam.com/securityreviews/5GP0220G0U.html http://www.watchfire.com/resources/HTTP-Request-Smuggling.pdf http://seclists.org/lists/bugtraq/2005/Jun/0025.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-2763`	vulnerable	2026-06-08 04:48:10.839770	Details available The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting. Published: 2009-06-01T22:00:00.000Z Updated: 2024-09-17T00:11:42.049Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/867593 http://archive.cert.uni-stuttgart.de/uniras/2004/02/msg00007.html http://www.cgisecurity.com/whitehat-mirror/WH-WhitePaper_XST_ebook.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0826`	vulnerable	2026-06-08 04:47:51.548246	Details available Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message. Published: 2004-09-02T04:00:00.000Z Updated: 2024-08-08T00:31:47.919Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/11015 http://xforce.iss.net/xforce/alerts/id/180 https://exchange.xforce.ibmcloud.com/vulnerabilities/16314 http://marc.info/?l=bugtraq&m=109351293827731&w=2	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.