Vulnerability in Sun Iplanet Directory Server

CVE-2003-0676

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.

EPSS: 0.016 (73.7th percentile) — read the EPSS interpretation.

Affected products

Sun Iplanet_directory_server — versions 5.0, 5.1
Sun One_directory_server — versions 5.0, 5.0_sp2, 5.1
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)