Vulnerability CVE-2002-1315
Published: 2002-11-29   Modified: 2012-02-12

Description:
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).

CVSS2 => (AV:N/AC:M/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
6.8/10
6.4/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Iplanet -> Iplanet web server 

 References:
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html
http://marc.info/?l=bugtraq&m=103772308030269&w=2
http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1
http://www.iss.net/security_center/static/10692.php
http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt
http://www.securityfocus.com/bid/6202
Copyright 2024, cxsecurity.com

 

Back to Top