Lucene search

[email protected]CVE-2002-1315

HistoryNov 29, 2002 - 5:00 a.m.

CVE-2002-1315

2002-11-2905:00:00

[email protected]

web.nvd.nist.gov

iplanet

webserver

xss

vulnerability

cve-2002-1315

admin server

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.5 Medium

AI Score

Confidence

High

0.786 High

EPSS

Percentile

98.3%

JSON

Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

Affected configurations

NVD

Node

iplanetiplanet_web_serverMatch4.1

iplanetiplanet_web_serverMatch4.1_sp1

iplanetiplanet_web_serverMatch4.1_sp2

iplanetiplanet_web_serverMatch4.1_sp3

iplanetiplanet_web_serverMatch4.1_sp4

iplanetiplanet_web_serverMatch4.1_sp5

iplanetiplanet_web_serverMatch4.1_sp6

iplanetiplanet_web_serverMatch4.1_sp7

iplanetiplanet_web_serverMatch4.1_sp8

iplanetiplanet_web_serverMatch4.1_sp9

iplanetiplanet_web_serverMatch4.1_sp10

iplanetiplanet_web_serverMatch4.1_sp11

CPENameOperatorVersion
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp1
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp2
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp3
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp4
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp5
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp6
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp7
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp8
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp9

CPE	Name	Operator	Version
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp1
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp2
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp3
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp4
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp5
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp6
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp7
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp8
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp9

Rows per page:

1-10 of 121

References

archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html

marc.info/?l=bugtraq&m=103772308030269&w=2

sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1

www.iss.net/security_center/static/10692.php

www.ngsec.com/docs/advisories/NGSEC-2002-4.txt

www.securityfocus.com/bid/6202

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

5.5 Medium

AI Score

Confidence

High

0.786 High

EPSS

Percentile

98.3%

JSON

Related for CVE-2002-1315

cve2 cvelist3 nvd3 checkpoint_advisories1