Unscored severity · published Dec 11, 2000
CVE-2000-1075
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a
–
CVSS
6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.0% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DS
Directory Server · Netscape
4.12 · source: NVD
IC
Iplanet Certificate Management System · Sun
4.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2000-1075
CVE.org
https://www.cve.org/CVERecord?id=CVE-2000-1075
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2000-10/0383.html
www.iplanet.com
http://www.iplanet.com/downloads/patches/0122.html
www.osvdb.org
http://www.osvdb.org/4086
www.osvdb.org
http://www.osvdb.org/486
Exploit
http://www.securityfocus.com/bid/1839
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/5421
More from Directory Server
–
CVE-2004-0826
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2…
–
CVE-2004-1236
Buffer overflow in the LDAP component for Netscape Directory Server (NDS) 3.6 on HP-UX and other operating systems allows remote attackers to execute arbitrary code
–
CVE-2001-0164
Buffer overflow in Netscape Directory Server 4.12 and earlier allows remote attackers to cause a denial of service or execute arbitrary commands via a malformed recipient field
–
CVE-2000-1076
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote…
–
CVE-1999-0807
The Netscape Directory Server installation procedure leaves sensitive information in a file that is accessible to local users