CVE-2002-1654 - CVE House
Back to Database
Status published High CVE-2002-1654

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0...

Vulnerability Description

iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-1654

Credits & Attribution

No credits recorded in the NVD database.

References

More from iplanet

View All →
CVE-2003-1587
Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to...
Medium 5
CVE-2003-1586
Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to...
Medium 4.3
CVE-2002-1655
The Web Publishing feature in Netscape Enterprise Server 3.x and...
Medium 5
CVE-2002-1316
importInfo in the Admin Server for iPlanet WebServer 4.x, up...
Medium 6.8
CVE-2002-1315
Cross-site scripting (XSS) vulnerability in the Admin Server for iPlanet...
Medium 6.8

Affected Vendor

Affected Software

iplanet web server, enterprise server
Vulnerable Versions:
6.0, enterprise_4.0, enterprise_4.1, 2.0, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6

Timeline

Official Publish: March 28th, 2005
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.