GCVE - cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:t._hauck:jana_web_server:2.2.1:*:*:*:*:*:*:*

part: a version: 2.2.1 update: *

Vendor	T. Hauck (`33c9d2e1-e309-5770-a274-9ae0b7d9f672`)
Product	Jana Web Server (`89636a9e-b155-5bea-9803-2b9b05b26a97`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2002-1066`	vulnerable	2026-06-08 04:46:22.859293	Details available Thomas Hauck Jana Server 1.4.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large message index value in a (1) RETR or (2) DELE command to the POP3 server, which exceeds the array limits and allows a buffer overflow attack. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:16.903Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html http://www.iss.net/security_center/static/9689.php http://www.securityfocus.com/bid/5327	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1065`	vulnerable	2026-06-08 04:46:22.858903	Details available Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, does not restrict the number of unsuccessful login attempts, which makes it easier for remote attackers to gain privileges via brute force username and password guessing. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:17.033Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html http://www.iss.net/security_center/static/9688.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1064`	vulnerable	2026-06-08 04:46:22.858526	Details available Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, generates different responses for valid and invalid usernames, which allows remote attackers to identify valid users on the server. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:16.625Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html http://www.securityfocus.com/bid/5326 http://www.iss.net/security_center/static/9688.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1063`	vulnerable	2026-06-08 04:46:22.858119	Details available Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to cause a denial of service (resource exhaustion) via a large number of FTP PASV requests, which consumes all available FTP ports. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:16.862Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html http://www.securityfocus.com/bid/5325 http://www.iss.net/security_center/static/9687.php	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1062`	vulnerable	2026-06-08 04:46:22.857712	Details available Signedness error in Thomas Hauck Jana Server 2.x through 2.2.1, and 1.4.6 and earlier, allows remote attackers to execute arbitrary code via long (1) Username, (2) Password, or (3) Hostname entries. Published: 2002-08-31T04:00:00.000Z Updated: 2024-08-08T03:12:16.891Z Open on db.gcve.eu Reference links http://archives.neohapsis.com/archives/bugtraq/2002-07/0329.html http://www.iss.net/security_center/static/9684.php http://www.securityfocus.com/bid/5321	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2002-1061`	vulnerable	2026-06-08 04:46:22.857185	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Jana Web Server

Notes

PURL mappings

Vulnerability references

Contribute