Directory Traversal Vulnerability in iPlanet Certificate Management System by Sun Microsystems

CVE-2000-1075

What is CVE-2000-1075?

The iPlanet Certificate Management System and Directory Server are vulnerable to a directory traversal attack, allowing remote attackers to gain unauthorized access to sensitive files. By exploiting this vulnerability through various services such as Agent, End Entity, or Administrator, an attacker can manipulate file paths using the dot-dot (..) notation. This flaw poses significant risks, including disclosure of system files, configuration data, or other sensitive information that could compromise the integrity and confidentiality of the affected systems.

References