CVE

Id
5700  
CVE No.
CVE-2002-1316  
Status
Candidate  
Description
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).  
Phase
Modified (20071014)  
Votes
ACCEPT(1) Baker | NOOP(4) Christey, Cole, Cox, Wall | REVIEWING(1) Green  
Comments
Christey> fix typo: "paramatar"  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
31389 5700 CVE-2002-1316 VULNWATCH:20021118 iPlanet WebServer, remote root compromise  View
31390 5700 CVE-2002-1316 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html  View
31391 5700 CVE-2002-1316 BUGTRAQ:20021119 iPlanet WebServer, remote root compromise  View
31392 5700 CVE-2002-1316 URL:http://marc.info/?l=bugtraq&m=103772308030269&w=2  View
31393 5700 CVE-2002-1316 MISC:http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt  View
31394 5700 CVE-2002-1316 SUNALERT:49475  View
31395 5700 CVE-2002-1316 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1  View
31396 5700 CVE-2002-1316 BID:6203  View
31397 5700 CVE-2002-1316 URL:http://www.securityfocus.com/bid/6203  View
31398 5700 CVE-2002-1316 XF:iplanet-perl-command-execution(10693)  View

Related JVN