Strix
26.1K

CVE-2002-1316

UnknownEPSS 2.04%

Last modified

CVE-2002-1316 is a vulnerability of currently unknown severity. importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).. EPSS estimates a 2.04% chance of exploitation in the next 30 days.

Description

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Metrics

EPSS Probability
2.04%

78.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

VendorProductVersions
IplanetIplanet Web Server4.1
IplanetIplanet Web Server4.1_sp1
IplanetIplanet Web Server4.1_sp2
IplanetIplanet Web Server4.1_sp3
IplanetIplanet Web Server4.1_sp4
IplanetIplanet Web Server4.1_sp5
IplanetIplanet Web Server4.1_sp6
IplanetIplanet Web Server4.1_sp7
IplanetIplanet Web Server4.1_sp8
IplanetIplanet Web Server4.1_sp9
IplanetIplanet Web Server4.1_sp10
IplanetIplanet Web Server4.1_sp11

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2002-1316?
importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).
How severe is CVE-2002-1316?
Severity scoring for CVE-2002-1316 is pending analysis. The EPSS model estimates a 2.04% probability of exploitation in the next 30 days.
How do I fix CVE-2002-1316?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2002-1316?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST