Approved changes feed: RSS · Atom

cpe:2.3:a:critical_path:injoin_directory_server:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorCritical Path (7cd0fb98-5cfd-50a6-b1dc-663b3fb2c639)
ProductInjoin Directory Server (0b7bb7f3-5f21-5636-bfac-dcac415e6064)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2002-0787 vulnerable 2026-06-08 04:46:22.245492 Details available
Cross-site scripting vulnerabilities in iCon administrative web server for Critical Path inJoin Directory Server 4.0 allow remote attackers to execute script as the administrator via administrator URLs with modified (1) LOCID or (2) OC parameters.
Published: 2002-07-26T04:00:00.000Z
Updated: 2024-08-08T03:03:48.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0786 vulnerable 2026-06-08 04:46:22.245234 Details available
iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.
Published: 2002-07-26T04:00:00.000Z
Updated: 2024-08-08T03:03:48.644Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1315 vulnerable 2026-06-08 04:46:19.559536 Details available
Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via malformed BER encodings, as demonstrated by the PROTOS LDAPv3 test suite.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T04:51:07.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1314 vulnerable 2026-06-08 04:46:19.558463 Details available
Buffer overflows in Critical Path (1) InJoin Directory Server or (2) LiveContent Directory allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T04:51:07.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.