CVE-2002-1316: Iplanet Web Server

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

importInfo in the Admin Server for iPlanet WebServer 4.x, up to SP11, allows the web administrator to execute arbitrary commands via shell metacharacters in the dir parameter, and possibly allows remote attackers to exploit this vulnerability via a separate XSS issue (CVE-2002-1315).

Affected products

• Iplanet Iplanet Web Server: version 4.1 only; version 4.1_sp1 only; version 4.1_sp2 only; version 4.1_sp3 only; version 4.1_sp4 only; version 4.1_sp5 only; …

Published 2002-11-29. Last modified 2026-06-16.