PT-2002-2379 · Netscape · Iplanet Web Server+1

Publicado 2002-12-31 · Atualizado 2017-07-11 · CVE-2002-1655

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscape Enterprise Server versions 3.x iPlanet Web Server versions 4.x

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a specific request to the Web Publishing feature.

Recommendations For Netscape Enterprise Server versions 3.x, consider disabling the Web Publishing feature to prevent exploitation. For iPlanet Web Server versions 4.x, restrict access to the Web Publishing feature until a fix is available.

Exploit

Correção

Identificadores relacionados

CVE-2002-1655

Produtos afetados

Netscape Enterprise Server

Iplanet Web Server

Referências · 8

• 🔥 http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html · Exploit
• 🔥 http://securityfocus.com/bid/3826 · Exploit
• http://kb.cert.org/vuls/id/191763 · Correção
• http://kb.cert.org/vuls/id/AAMN-567N48 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7842 · Nota
• http://procheckup.com/security_info/vuln_pr0104.html · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1655 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1655 · Nota de Segurança