CVE-2000-1075
iPlanet Certificate Management System 4.2 and Directory Server 4.12 - Directory Traversal via Dot-Dot Attack
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2000-1075. PoCs published by CORE-SDI.
AI-analyzed exploit summary The vulnerability involves directory traversal in Netscape Directory Server via HTTP requests using '\../' sequences. It affects multiple services (Agent, End Entity, Administrator) on specific ports, allowing unauthorized access to files outside the web root.
Description
Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End Entity, or Administrator services.
Exploits (2)
The vulnerability involves directory traversal in Netscape Directory Server via HTTP requests using '\../' sequences. It affects multiple services (Agent, End Entity, Administrator) on specific ports, allowing unauthorized access to files outside the web root.
The exploit describes a directory traversal vulnerability in iPlanet Certificate Management System (CMS) via HTTP requests using '\../' sequences. It affects multiple services on different ports, allowing access to files outside the web root.