VULNERABILITY INTELLIGENCE

CVE-2002-1316

CVSS score6.8 MEDIUM
EPSS probability2.04%
CISA KEVNot currently listed
Published2002-11-29
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Primary references