CVE-2002-0686

CVSS 7.5 - HIGH

Description

Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.

Affected Products

Vendor	Product	Version
iplanet	iplanet_web_server	`4.1`
iplanet	iplanet_web_server	`6.0`

References

http://marc.info/?l=bugtraq&m=102622220416889&w=2

http://www.iss.net/security_center/static/9506.php

http://www.kb.cert.org/vuls/id/612843

http://www.nextgenss.com/vna/sun-iws.txt

http://www.securityfocus.com/bid/4851

http://marc.info/?l=bugtraq&m=102622220416889&w=2

http://www.iss.net/security_center/static/9506.php

http://www.kb.cert.org/vuls/id/612843

http://www.nextgenss.com/vna/sun-iws.txt

http://www.securityfocus.com/bid/4851

Weakness Types

NVD-CWE-Other

CVE Information

CVE ID:: CVE-2002-0686
Published:: 2002-07-23
Modified:: 2026-04-16
CVSS Score:: 7.5
Severity:: HIGH
Vector:: AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Vendors

iplanet

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL