CVE-2002-1316

Published: Nov 29, 2002Modified: Apr 16, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Affected (12)

Products: Iplanet: Iplanet Web Server

Iplanet

1 product

Iplanet Web Server

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Iplanet Iplanet Web Server	Version 4.1
Iplanet Iplanet Web Server	Version 4.1_sp10
Iplanet Iplanet Web Server	Version 4.1_sp11
Iplanet Iplanet Web Server	Version 4.1_sp1
Iplanet Iplanet Web Server	Version 4.1_sp2
Iplanet Iplanet Web Server	Version 4.1_sp3
Iplanet Iplanet Web Server	Version 4.1_sp4
Iplanet Iplanet Web Server	Version 4.1_sp5
Iplanet Iplanet Web Server	Version 4.1_sp6
Iplanet Iplanet Web Server	Version 4.1_sp7
Iplanet Iplanet Web Server	Version 4.1_sp8
Iplanet Iplanet Web Server	Version 4.1_sp9