CVE-2003-0676: Medium severity Sun Iplanet Directory Server vulnerability
Published Aug 14, 2003
·Updated
Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.
Affected Software
10 affected components
Sun Iplanet Directory Server=5.0
Sun Iplanet Directory Server=5.1
Sun Iplanet Directory Server=5.1-sp1
Sun Iplanet Directory Server=5.1-sp2
Sun ONE Directory Server=5.0
Sun ONE Directory Server=5.0-sp1
Sun ONE Directory Server=5.0_sp2
Sun ONE Directory Server=5.1
Sun ONE Directory Server=5.1-sp1
Sun ONE Directory Server=5.1-sp2
Event History
Aug 14, 2003
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Aug 27, 2003
Data Sourced
via NVD·04:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2003-0676?
CVE-2003-0676 is classified as a medium severity vulnerability, allowing unauthorized file access.
2
How do I fix CVE-2003-0676?
To fix CVE-2003-0676, upgrade to a secure version of the iPlanet Administration Server that patches this directory traversal vulnerability.
3
Which versions of software are affected by CVE-2003-0676?
CVE-2003-0676 affects iPlanet and Sun ONE Directory Servers, specifically versions 5.0 and 5.1.
4
What are the potential impacts of CVE-2003-0676?
The potential impact of CVE-2003-0676 includes the ability for remote attackers to read arbitrary files on the server.
5
Is CVE-2003-0676 publicly known?
Yes, CVE-2003-0676 is a publicly documented vulnerability that has been discussed in security forums.