CVE-2002-1654 iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provide...
HighCVSS 7.5
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet web server | = 6.0 | No fix listed |
| iplanet web server | = enterprise_4.0 | No fix listed |
| iplanet web server | = enterprise_4.1 | No fix listed |
| netscape enterprise server | = 2.0 | No fix listed |
| netscape enterprise server | = 3.0 | No fix listed |
| netscape enterprise server | = 3.1 | No fix listed |
| netscape enterprise server | = 3.2 | No fix listed |
| netscape enterprise server | = 3.3 | No fix listed |
| netscape enterprise server | = 3.4 | No fix listed |
| netscape enterprise server | = 3.5 | No fix listed |
| netscape enterprise server | = 3.6 | No fix listed |
References
- 20020109 Netscape publishing wp-force-auth command exploit mailing-list patch
- 1003157 exploit patch vdb-entry
- VU#985347 patch third-party-advisory us-government-resource
- www.kb.cert.org
- www.procheckup.com
- www.securiteam.com exploit patch
- 3831 exploit patch vdb-entry
- netscape-enterprise-http-brute-force(7845) vdb-entry