CVE-2001-0620: Low severity iPlanet Calendar Server vulnerability
iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-0620?
CVE-2001-0620 has a high severity due to its potential to expose sensitive administrative credentials.
How do I fix CVE-2001-0620?
To fix CVE-2001-0620, ensure that the configuration file's permissions are securely set to restrict unauthorized access.
Which versions are affected by CVE-2001-0620?
CVE-2001-0620 affects iPlanet Calendar Server versions 5.0p2 and earlier.
Can CVE-2001-0620 lead to unauthorized data access?
Yes, CVE-2001-0620 can allow local attackers to access the Netscape Admin Server's LDAP database and read arbitrary files.
Is there a known workaround for CVE-2001-0620?
A known workaround for CVE-2001-0620 is to regularly audit and tighten file permissions on the configuration files.