Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

iPlanet Web Server Search Component Buffer Overflow Vulnerability

iPlanet Webserver is an http server product offered by Sun Microsystems.

A stack-based overflow condition has been reported in versions of iPlanet Web Server. The vulnerability occurs in the Search component of iPlanet Web Server. An attacker is able to submit an overly long value to the 'NS-rel-doc-name' parameter to cause the buffer overflow condition. This could potentially allow for malicious clients to execute arbitrary code on (and gain control of) iPlanet hosts. Sending data not specially constructed to execute code could cause the server to crash.







 

Privacy Statement
Copyright 2008, SecurityFocus