Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Iplanet Certificate Management System
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-1075 2 Netscape, Sun 2 Directory Server, Iplanet Certificate Management System 2023-12-10 5.0 MEDIUM N/A
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
CVE-2000-1076 2 Netscape, Sun 2 Directory Server, Iplanet Certificate Management System 2023-12-10 10.0 HIGH N/A
Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain administrative privileges on the server.