VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 2, 2001· Updated Jun 16, 2026

CVE-2001-0620

CVE-2001-0620

Description

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.

Affected products

2
  • Iplanet/Calendar Server2 versions
    cpe:2.3:a:iplanet:calendar_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:iplanet:calendar_server:*:*:*:*:*:*:*:*range: <=5.0p2
    • (no CPE)range: <=5.0p2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.