VULHUB ™

Both iPlanet Certificate Management System (CMS) and Netscape Directory Server store its administrative password in plaintext under \admin-serv\config\adm.conf. Successful retrieval of the password would yield administrative control over the application. The password may be acquired by utilizing the techniques described in "iPlanet CMS/Netscape Directory Server Directory Traversal Vulnerability" (http://www.securityfocus.com/bid/1839).

Both iPlanet Certificate Management System (CMS) and Netscape Directory Server store its administrative password in plaintext under \admin-serv\config\adm.conf. Successful retrieval of the password would yield administrative control over the application. The password may be acquired by utilizing the techniques described in "iPlanet CMS/Netscape Directory Server Directory Traversal Vulnerability" (http://www.securityfocus.com/bid/1839).