CVE-2002-0686

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=102622220416889&w=2
http://www.iss.net/security_center/static/9506.phpVendor Advisory
http://www.kb.cert.org/vuls/id/612843US Government Resource
http://www.nextgenss.com/vna/sun-iws.txt
http://www.securityfocus.com/bid/4851Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=102622220416889&w=2
http://www.iss.net/security_center/static/9506.phpVendor Advisory
http://www.kb.cert.org/vuls/id/612843US Government Resource
http://www.nextgenss.com/vna/sun-iws.txt
http://www.securityfocus.com/bid/4851Patch, Vendor Advisory

Timeline

Published: Jul 23, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-06875.0The "through the web code" capability for Zope 2.0 through 2.5.1 b1 allows untrusted users to shut down the Zope server via certain headers.CVE-2002-06887.5ZCatalog plug-in index support capability for Zope 2.4.0 through 2.5.1 allows anonymous users and untrusted code to bypass access restrictio CVE-2002-069010.0Format string vulnerability in McAfee Security ePolicy Orchestrator (ePO) 2.5.1 allows remote attackers to execute arbitrary code via an HTT CVE-2002-06917.5Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a l CVE-2002-06927.5Buffer overflow in SmartHTML Interpreter (shtml.dll) in Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers t CVE-2002-06937.5Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 CVE-2002-06947.5The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000,CVE-2002-06957.5Buffer overflow in the Transact-SQL (T-SQL) OpenRowSet component of Microsoft Data Access Components (MDAC) 2.5 through 2.7 for SQL Server 7 CVE-2002-06967.5Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual F CVE-2002-069710.0Microsoft Metadirectory Services (MMS) 2.2 allows remote attackers to bypass authentication and modify sensitive data by using an LDAP clien CVE-2002-06987.5Buffer overflow in Internet Mail Connector (IMC) for Microsoft Exchange Server 5.5 allows remote attackers to execute arbitrary code via an CVE-2002-06995.0Unknown vulnerability in the Certificate Enrollment ActiveX Control in Microsoft Windows 98, Windows 98 Second Edition, Windows Millennium,