CVE-2002-1654

Description

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/7845

https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-1635

http://www.securityfocus.com/bid/3831

http://www.securiteam.com/securitynews/5IP0G0060Q.html

http://www.procheckup.com/vulnerabilities/pr0105.html

http://www.kb.cert.org/vuls/id/AAMN-567NFX

http://www.kb.cert.org/vuls/id/985347

http://securitytracker.com/id?1003157

http://lists.virus.org/vulnwatch-0201/msg00008.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS