Sun Iplanet Certificate Management System vulnerabilities

2 CVEs affecting Sun Iplanet Certificate Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2000-1076, published 2000-12-11.

More from Sun.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2000-1075, published 2000-12-11. Medium severity, CVSS 5.0. EPSS: 6% chance of exploitation in the next 30 days. Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End…
• CVE-2000-1076, published 2000-12-11. High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days. Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and possibly remote attackers to gain…