CVE-2002-1655 The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet web server | = enterprise_4.0 | No fix listed |
| iplanet web server | = enterprise_4.1 | No fix listed |
| netscape enterprise server | = 3.0 | No fix listed |
| netscape enterprise server | = 3.1 | No fix listed |
| netscape enterprise server | = 3.2 | No fix listed |
| netscape enterprise server | = 3.3 | No fix listed |
| netscape enterprise server | = 3.4 | No fix listed |
| netscape enterprise server | = 3.5 | No fix listed |
| netscape enterprise server | = 3.6 | No fix listed |
References
- 20020109 Netscape ?wp-html-rend denial of service attack exploit mailing-list patch
- VU#191763 patch third-party-advisory us-government-resource
- www.kb.cert.org
- www.procheckup.com
- 3826 exploit patch vdb-entry
- netscape-enterprise-invalid-command-dos(7842) vdb-entry