Lucene search

[email protected]CVE-2002-1654

HistoryMar 28, 2005 - 5:00 a.m.

CVE-2002-1654

2005-03-2805:00:00

[email protected]

web.nvd.nist.gov

iplanet web server

http basic authentication

netscape enterprise server

cve-2002-1654

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.04 Low

EPSS

Percentile

92.1%

JSON

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.

Affected configurations

NVD

Node

iplanetiplanet_web_serverMatch6.0

iplanetiplanet_web_serverMatchenterprise_4.0

iplanetiplanet_web_serverMatchenterprise_4.1

netscapeenterprise_serverMatch2.0

netscapeenterprise_serverMatch3.0

netscapeenterprise_serverMatch3.1

netscapeenterprise_serverMatch3.2

netscapeenterprise_serverMatch3.3

netscapeenterprise_serverMatch3.4

netscapeenterprise_serverMatch3.5

netscapeenterprise_serverMatch3.6

CPENameOperatorVersion
iplanet:iplanet_web_serveriplanet iplanet web servereq6.0
iplanet:iplanet_web_serveriplanet iplanet web servereqenterprise_4.0
iplanet:iplanet_web_serveriplanet iplanet web servereqenterprise_4.1
netscape:enterprise_servernetscape enterprise servereq2.0
netscape:enterprise_servernetscape enterprise servereq3.0
netscape:enterprise_servernetscape enterprise servereq3.1
netscape:enterprise_servernetscape enterprise servereq3.2
netscape:enterprise_servernetscape enterprise servereq3.3
netscape:enterprise_servernetscape enterprise servereq3.4
netscape:enterprise_servernetscape enterprise servereq3.5

CPE	Name	Operator	Version
iplanet:iplanet_web_server	iplanet iplanet web server	eq	6.0
iplanet:iplanet_web_server	iplanet iplanet web server	eq	enterprise_4.0
iplanet:iplanet_web_server	iplanet iplanet web server	eq	enterprise_4.1
netscape:enterprise_server	netscape enterprise server	eq	2.0
netscape:enterprise_server	netscape enterprise server	eq	3.0
netscape:enterprise_server	netscape enterprise server	eq	3.1
netscape:enterprise_server	netscape enterprise server	eq	3.2
netscape:enterprise_server	netscape enterprise server	eq	3.3
netscape:enterprise_server	netscape enterprise server	eq	3.4
netscape:enterprise_server	netscape enterprise server	eq	3.5

Rows per page:

1-10 of 111

References

lists.virus.org/vulnwatch-0201/msg00008.html

securitytracker.com/id?1003157

www.kb.cert.org/vuls/id/985347

www.kb.cert.org/vuls/id/AAMN-567NFX

www.procheckup.com/vulnerabilities/pr0105.html

www.securiteam.com/securitynews/5IP0G0060Q.html

www.securityfocus.com/bid/3831

exchange.xforce.ibmcloud.com/vulnerabilities/7845

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.3 High

AI Score

Confidence

Low

0.04 Low

EPSS

Percentile

92.1%

JSON

Related for CVE-2002-1654

nvd1 cvelist1