CVE-2000-1075: Medium severity Netscape Directory Server vulnerability

Published Dec 11, 2000

Updated

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.

Affected Software

2 affected components

Netscape Directory Server=4.12

Sun iPlanet Certificate Management System=4.2

Remediation

Patch Available

http://www.securityfocus.com/bid/1839

Event History

Dec 11, 2000

CVE Published

05:00 AM

May 7, 2001

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-1075?

CVE-2000-1075 is considered a high severity vulnerability due to its potential to allow unauthorized access to sensitive files.

How do I fix CVE-2000-1075?

To fix CVE-2000-1075, apply the recommended patches from your software vendor for the affected versions of iPlanet Certificate Management System 4.2 and Directory Server 4.12.

What systems are affected by CVE-2000-1075?

CVE-2000-1075 affects iPlanet Certificate Management System version 4.2 and Netscape Directory Server version 4.12.

What type of vulnerable attack does CVE-2000-1075 allow?

CVE-2000-1075 allows remote attackers to perform directory traversal attacks to read arbitrary files on the affected systems.

Can CVE-2000-1075 lead to data leakage?

Yes, CVE-2000-1075 can lead to data leakage as attackers can exploit the vulnerability to access sensitive files.