CVE-2002-1654: High severity Netscape Enterprise server vulnerability
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-1654?
CVE-2002-1654 is considered a high severity vulnerability due to its ability to facilitate brute force password guessing.
How do I fix CVE-2002-1654?
To fix CVE-2002-1654, you should update to the latest version of the iPlanet Web Server or Netscape Enterprise Server that does not contain this vulnerability.
Who is affected by CVE-2002-1654?
CVE-2002-1654 affects users of iPlanet Web Server Enterprise Edition and Netscape Enterprise Server versions 2.0 through 6.0.
What type of attack does CVE-2002-1654 enable?
CVE-2002-1654 enables remote attackers to conduct HTTP Basic Authentication attacks leveraging brute force methods.
Is there a specific command used in the CVE-2002-1654 attack?
The wp-force-auth Web Publisher command is specifically mentioned as an attack vector in CVE-2002-1654.