CVE-2002-1316

Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

Published: 29/11/2002 Updated: 18/10/2016

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote malicious users to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Vulnerable Product	Search on Vulmon	Subscribe to Product
iplanet iplanet web server 4.1 sp8
iplanet iplanet web server 4.1
iplanet iplanet web server 4.1 sp11
iplanet iplanet web server 4.1 sp4
iplanet iplanet web server 4.1 sp2
iplanet iplanet web server 4.1 sp5
iplanet iplanet web server 4.1 sp1
iplanet iplanet web server 4.1 sp10
iplanet iplanet web server 4.1 sp7
iplanet iplanet web server 4.1 sp9
iplanet iplanet web server 4.1 sp6
iplanet iplanet web server 4.1 sp3

NVD-CWE-Other http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1 http://www.securityfocus.com/bid/6203 http://www.iss.net/security_center/static/10693.php http://marc.info/?l=bugtraq&m=103772308030269&w=2 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1316

Vulnerability Summary

References

Vulmon Search

About

Products

Connect