Approved changes feed: RSS · Atom

cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*

part: a version: 1.45 update: *

VendorT. Hauck (33c9d2e1-e309-5770-a274-9ae0b7d9f672)
ProductJana Web Server (89636a9e-b155-5bea-9803-2b9b05b26a97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-1066 vulnerable 2026-06-08 04:46:22.859211 Details available
Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:16.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1065 vulnerable 2026-06-08 04:46:22.858816 Details available
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:17.033Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1064 vulnerable 2026-06-08 04:46:22.858438 Details available
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:16.625Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1063 vulnerable 2026-06-08 04:46:22.858036 Details available
Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:16.862Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1062 vulnerable 2026-06-08 04:46:22.857623 Details available
Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries.
Published: 2002-08-31T04:00:00.000Z
Updated: 2024-08-08T03:12:16.891Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1061 vulnerable 2026-06-08 04:46:22.853819 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0558 vulnerable 2026-06-08 04:45:20.497019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0557 vulnerable 2026-06-08 04:45:20.496002 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1083 vulnerable 2026-06-08 04:44:58.203865 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1082 vulnerable 2026-06-08 04:44:58.203604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.