CVE Details for CVE: CVE-2002-1654
Summary
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 31-12-2002 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://lists.virus.org/vulnwatch-0201/msg00008.html
- http://www.procheckup.com/vulnerabilities/pr0105.html
- http://www.kb.cert.org/vuls/id/985347
- http://www.securiteam.com/securitynews/5IP0G0060Q.html
- http://securitytracker.com/id?1003157
- http://www.securityfocus.com/bid/3831
- http://www.kb.cert.org/vuls/id/AAMN-567NFX
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7845
Vulnerable Configurations
-
cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*
-
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*
-
cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*
cpe:2.3:a:iplanet:iplanet_web_server:6.0:*:*:*:*:*:*:*
-
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*
CWE
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| PARTIAL | PARTIAL | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 3831 |
| cert-vn | VU#985347 |
| confirm | http://www.kb.cert.org/vuls/id/AAMN-567NFX |
| misc | |
| sectrack | 1003157 |
| vulnwatch | 20020109 Netscape publishing wp-force-auth command |
| xf | netscape-enterprise-http-brute-force(7845) |