CVE-2003-0676: Sun Iplanet Directory Server

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in ViewLog for iPlanet Administration Server 5.1 (aka Sun ONE) allows remote attackers to read arbitrary files via "..%2f" (partially encoded dot dot) sequences.

Affected products

• Sun Iplanet Directory Server: version 5.0 only; version 5.1 only
• Sun One Directory Server: version 5.0 only; version 5.0_sp2 only; version 5.1 only

Published 2003-08-27. Last modified 2026-06-16.