PT-2002-2379 · Netscape · Iplanet Web Server+1

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1655

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Netscape Enterprise Server versions 3.x iPlanet Web Server versions 4.x

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a specific request to the Web Publishing feature.

Recommendations For Netscape Enterprise Server versions 3.x, consider disabling the Web Publishing feature to prevent exploitation. For iPlanet Web Server versions 4.x, restrict access to the Web Publishing feature until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2002-1655

Affected Products

Netscape Enterprise Server

Iplanet Web Server

References · 8

• 🔥 http://cert.uni-stuttgart.de/archive/vulnwatch/2002/01/msg00007.html · Exploit
• 🔥 http://securityfocus.com/bid/3826 · Exploit
• http://kb.cert.org/vuls/id/191763 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2002-1655 · Security Note
• http://kb.cert.org/vuls/id/AAMN-567N48 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7842 · Note
• http://procheckup.com/security_info/vuln_pr0104.html · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1655 · Note