Approved changes feed: RSS · Atom

cpe:2.3:a:sun:one_web_server:6.0:sp1:*:*:*:*:*:*

part: a version: 6.0 update: sp1

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductOne Web Server (b1bb3f1d-17e0-5a5f-907f-75a2d36e6839)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-1589 vulnerable 2026-06-08 04:47:48.005420 Details available
Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.
Published: 2010-02-25T19:00:00.000Z
Updated: 2024-08-08T02:35:17.328Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1578 vulnerable 2026-06-08 04:47:47.990587 Details available
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a "format=" substring, related to an "Inverse Lookup Log Corruption (ILLC)" issue.
Published: 2010-02-05T22:13:00.000Z
Updated: 2024-08-08T02:35:17.123Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1577 vulnerable 2026-06-08 04:47:47.988272 Details available
Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an "Inverse Lookup Log Corruption (ILLC)" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.
Published: 2010-02-05T22:13:00.000Z
Updated: 2024-08-08T02:35:16.449Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.