GCVE - cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sun:one_web_server:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

Vendor	Sun (`f793a52f-9733-5503-ba70-29fa391cdd2b`)
Product	One Web Server (`b1bb3f1d-17e0-5a5f-907f-75a2d36e6839`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2003-1589`	vulnerable	2026-06-08 04:47:48.005403	Details available Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors. Published: 2010-02-25T19:00:00.000Z Updated: 2024-08-08T02:35:17.328Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/56616 http://sunsolve.sun.com/search/document.do?assetkey=1-66-201454-1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1579`	vulnerable	2026-06-08 04:47:47.990938	Details available Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Published: 2010-02-05T22:13:00.000Z Updated: 2024-09-16T19:19:32.473Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/313867	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1578`	vulnerable	2026-06-08 04:47:47.990568	Details available Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue. Published: 2010-02-05T22:13:00.000Z Updated: 2024-08-08T02:35:17.123Z Open on db.gcve.eu Reference links http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 http://www.securityfocus.com/bid/7012 http://www.securityfocus.com/archive/1/313867 https://exchange.xforce.ibmcloud.com/vulnerabilities/56633	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1577`	vulnerable	2026-06-08 04:47:47.987474	Details available Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316. Published: 2010-02-05T22:13:00.000Z Updated: 2024-08-08T02:35:16.449Z Open on db.gcve.eu Reference links http://sunsolve.sun.com/search/document.do?assetkey=1-66-201453-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/56632 http://www.securityfocus.com/archive/1/313867	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.