Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Iplanet_web_server | Iplanet | 4.1 (including) | 4.1 (including) |
| Iplanet_web_server | Iplanet | 6.0 (including) | 6.0 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=102622220416889\u0026w=2
- http://www.iss.net/security_center/static/9506.php
- http://www.kb.cert.org/vuls/id/612843
- http://www.nextgenss.com/vna/sun-iws.txt
- http://www.securityfocus.com/bid/4851
- http://marc.info/?l=bugtraq\u0026m=102622220416889\u0026w=2
- http://www.iss.net/security_center/static/9506.php
- http://www.kb.cert.org/vuls/id/612843
- http://www.nextgenss.com/vna/sun-iws.txt
- http://www.securityfocus.com/bid/4851