Vulnerability Details CVE-2002-0686
Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.047
EPSS Ranking 88.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=102622220416889&w=2
- http://www.iss.net/security_center/static/9506.php
- http://www.kb.cert.org/vuls/id/612843
- http://www.nextgenss.com/vna/sun-iws.txt
- http://www.securityfocus.com/bid/4851
- http://marc.info/?l=bugtraq&m=102622220416889&w=2
- http://www.iss.net/security_center/static/9506.php
- http://www.kb.cert.org/vuls/id/612843
- http://www.nextgenss.com/vna/sun-iws.txt
- http://www.securityfocus.com/bid/4851
Products affected by CVE-2002-0686
-
cpe:2.3:a:iplanet:iplanet_web_server:4.1
-
cpe:2.3:a:iplanet:iplanet_web_server:6.0