CVE-2002-0686: Buffer Overflow

Published Jul 15, 2002

Updated

Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter.

Affected Software

2 affected components

iPlanet iPlanet Web Server=4.1

iPlanet iPlanet Web Server=6.0

Remediation

Patch Available

http://www.securityfocus.com/bid/4851

Event History

Jul 15, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0686?

CVE-2002-0686 is classified as a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2002-0686?

To fix CVE-2002-0686, it is recommended to upgrade to a patched version of the iPlanet Web Server or apply any available security updates.

What software is affected by CVE-2002-0686?

CVE-2002-0686 affects iPlanet Web Server 4.1 and 6.0, allowing remote attackers to exploit the vulnerability.

What type of attack does CVE-2002-0686 involve?

CVE-2002-0686 involves a buffer overflow attack that can lead to the execution of arbitrary code.

Can CVE-2002-0686 be exploited remotely?

Yes, CVE-2002-0686 can be exploited remotely through crafted requests sent to the affected iPlanet Web Server.