Home  >  CVE-2002-0686
CVE Details for CVE: CVE-2002-0686
Summary
Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.
Timestamps
Last major update 18-10-2016 - 02:21
Published 23-07-2002 - 04:00
Last modified 18-10-2016 - 02:21
References
Vulnerable Configurations
  • cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*
    cpe:2.3:a:iplanet:iplanet_web_server:4.1:*:*:*:*:*:*:*
  • cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*
    cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 4851
bugtraq 20020709 Sun iPlanet Web Server Buffer Overflow (#NISR09072002)
cert-vn VU#612843
misc http://www.nextgenss.com/vna/sun-iws.txt
xf iplanet-search-bo(9506)