GCVE-110-CERTCC-2002-630355

Advisory Published

Vulnetix · Advisory published December 4, 2002

IPlanet Enterprise Server and Netscape Enterprise Server versions prior to 4.1. SP12 have a vulnerability involving the rendering of <SCRIPT> tags embedded in the web logs when viewed through the administration client.

Download JSON Open in Console

Risk Scores

certcc-cam

impact14population10exploitation0widely_known2score_current1.365ease_of_exploitation13

References

Netscape and iPlanet Enterprise Servers fail to sanitize log files before they are displayed using the administration client

advisory

Netscape and iPlanet Enterprise Servers fail to sanitize log files before they are displayed using the administration client

url

Netscape and iPlanet Enterprise Servers fail to sanitize log files before they are displayed using the administration client

url

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON