Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 29/11/2002 Updated: 18/10/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote malicious users to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Vulnerable Product	Search on Vulmon	Subscribe to Product
iplanet iplanet web server 4.1_sp4
iplanet iplanet web server 4.1
iplanet iplanet web server 4.1_sp6
iplanet iplanet web server 4.1_sp7
iplanet iplanet web server 4.1_sp11
iplanet iplanet web server 4.1_sp2
iplanet iplanet web server 4.1_sp3
iplanet iplanet web server 4.1_sp5
iplanet iplanet web server 4.1_sp1
iplanet iplanet web server 4.1_sp10
iplanet iplanet web server 4.1_sp8
iplanet iplanet web server 4.1_sp9

NVD-CWE-Other http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1 http://www.securityfocus.com/bid/6203 http://www.iss.net/security_center/static/10693.php http://marc.info/?l=bugtraq&m=103772308030269&w=2 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1316

Vulnerability Summary

References

Vulmon Search

About

Products

Connect