Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Directory_server | Netscape | 4.12 (including) | 4.12 (including) |
| Iplanet_certificate_management_system | Sun | 4.2 (including) | 4.2 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html
- http://www.iplanet.com/downloads/patches/0122.html
- http://www.osvdb.org/4086
- http://www.osvdb.org/486
- http://www.securityfocus.com/bid/1839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5421
- http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html
- http://www.iplanet.com/downloads/patches/0122.html
- http://www.osvdb.org/4086
- http://www.osvdb.org/486
- http://www.securityfocus.com/bid/1839
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5421