CVE Details for CVE: CVE-2002-1655
Summary
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 31-12-2002 - 05:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html
- http://www.procheckup.com/security_info/vuln_pr0104.html
- http://www.kb.cert.org/vuls/id/191763
- http://www.securityfocus.com/bid/3826
- http://www.kb.cert.org/vuls/id/AAMN-567N48
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7842
Vulnerable Configurations
-
cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.0:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.1:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.4:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.5:*:*:*:*:*:*:*
-
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.0:*:*:*:*:*:*:*
-
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*
cpe:2.3:a:iplanet:iplanet_web_server:enterprise_4.1:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.6:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.2:*:*:*:*:*:*:*
-
cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*
cpe:2.3:a:netscape:enterprise_server:3.3:*:*:*:*:*:*:*
CWE
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| NONE | NONE | PARTIAL |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 3826 |
| cert-vn | VU#191763 |
| confirm | http://www.kb.cert.org/vuls/id/AAMN-567N48 |
| misc | http://www.procheckup.com/security_info/vuln_pr0104.html |
| vulnwatch | 20020109 Netscape ?wp-html-rend denial of service attack |
| xf | netscape-enterprise-invalid-command-dos(7842) |