CVE-2002-1315: XSS
First published: Thu Nov 21 2002(Updated: )
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows remote attackers to execute web script or HTML as the iPlanet administrator by injecting the desired script into error logs, and possibly escalating privileges by using the XSS vulnerability in conjunction with another issue (CVE-2002-1316).
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| iPlanet Web Server | =4.1_sp8 | |
| iPlanet Web Server | =4.1 | |
| iPlanet Web Server | =4.1_sp11 | |
| iPlanet Web Server | =4.1_sp4 | |
| iPlanet Web Server | =4.1_sp2 | |
| iPlanet Web Server | =4.1_sp5 | |
| iPlanet Web Server | =4.1_sp1 | |
| iPlanet Web Server | =4.1_sp10 | |
| iPlanet Web Server | =4.1_sp7 | |
| iPlanet Web Server | =4.1_sp9 | |
| iPlanet Web Server | =4.1_sp6 | |
| iPlanet Web Server | =4.1_sp3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0078.html
- http://www.ngsec.com/docs/advisories/NGSEC-2002-4.txt
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-49475-1
- http://www.securityfocus.com/bid/6202
- http://www.iss.net/security_center/static/10692.php
- http://marc.info/?l=bugtraq&m=103772308030269&w=2
Frequently Asked Questions
What is the severity of CVE-2002-1315?
CVE-2002-1315 is classified as a medium severity vulnerability due to the potential for cross-site scripting attacks.
How do I fix CVE-2002-1315?
To mitigate CVE-2002-1315, upgrade to a patched version of iPlanet Web Server 4.x or apply any available security updates.
What systems are affected by CVE-2002-1315?
CVE-2002-1315 affects iPlanet Web Server versions 4.1 up to SP11, including SP1 through SP10.
What impact does CVE-2002-1315 have on security?
CVE-2002-1315 can allow remote attackers to execute arbitrary scripts in the context of the iPlanet administration interface.
Can CVE-2002-1315 lead to privilege escalation?
Yes, CVE-2002-1315 may enable privilege escalation if exploited successfully through the XSS vulnerability.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/iplanet
- product/iplanet web server
- canonical/iplanet iplanet web server
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/iplanet web server
- version/iplanet web server/4.1_sp8
- version/iplanet web server/4.1
- version/iplanet web server/4.1_sp11
- version/iplanet web server/4.1_sp4
- version/iplanet web server/4.1_sp2
- version/iplanet web server/4.1_sp5
- version/iplanet web server/4.1_sp1
- version/iplanet web server/4.1_sp10
- version/iplanet web server/4.1_sp7
- version/iplanet web server/4.1_sp9
- version/iplanet web server/4.1_sp6
- version/iplanet web server/4.1_sp3