Lucene search

MitreCVE-2002-0686

HistoryJul 23, 2002 - 4:00 a.m.

CVE-2002-0686

2002-07-2304:00:00

mitre

web.nvd.nist.gov

cve

buffer overflow

iplanet

sun one

web server

security flaw

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.068

Percentile

93.9%

JSON

Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.

Affected configurations

Nvd

Node

iplanetiplanet_web_serverMatch4.1

iplanetiplanet_web_serverMatch6.0

VendorProductVersionCPE
iplanetiplanet_web_server4.1cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*
iplanetiplanet_web_server6.0cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iplanet	iplanet_web_server	4.1	cpe:2.3:a:iplanet:iplanet_web_server:4.1:::::::*
iplanet	iplanet_web_server	6.0	cpe:2.3:a:iplanet:iplanet_web_server:6.0:::::::*

References

marc.info/?l=bugtraq&m=102622220416889&w=2

www.iss.net/security_center/static/9506.php

www.kb.cert.org/vuls/id/612843

www.nextgenss.com/vna/sun-iws.txt

www.securityfocus.com/bid/4851

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

Confidence

High

EPSS

0.068

Percentile

93.9%

JSON

Related for CVE-2002-0686