CVE

Id
5699  
CVE No.
CVE-2002-1315  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).  
Phase
Modified (20071014)  
Votes
ACCEPT(1) Baker | NOOP(3) Cole, Cox, Wall | REVIEWING(1) Green  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31379 5699 CVE-2002-1315 VULNWATCH:20021118 iPlanet WebServer, remote root compromise  View
31380 5699 CVE-2002-1315 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html  View
31381 5699 CVE-2002-1315 BUGTRAQ:20021119 iPlanet WebServer, remote root compromise  View
31382 5699 CVE-2002-1315 URL:http://marc.info/?l=bugtraq&m=103772308030269&w=2  View
31383 5699 CVE-2002-1315 MISC:http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt  View
31384 5699 CVE-2002-1315 SUNALERT:49475  View
31385 5699 CVE-2002-1315 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1  View
31386 5699 CVE-2002-1315 BID:6202  View
31387 5699 CVE-2002-1315 URL:http://www.securityfocus.com/bid/6202  View
31388 5699 CVE-2002-1315 XF:iplanet-admin-log-xss(10692)  View

Related JVN