CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-08-27

Last modified

2024-08-08

Affected products

• Iplanet Directory Server (Sun)
• One Directory Server (Sun)

References

• http://marc.info/?l=bugtraq&m=106036588613929&w=2