CVE-2001-0620

LOW 2.1CVE-2001-0620 · Published 02/08/2001 · updated 16/06/2026

In short

CVE-2001-0620 is a LOW (CVSS 2.1) vulnerability affecting calendar server (iplanet).
Chance of exploitation in the next 30 days (EPSS): 0.37%, higher than 30.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
calendar server iplanet	`≤ 5.0p2`	No fix yet

Description

iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.

References

archives.neohapsis.com/archives/bugtraq/2001-04/0320.html
exchange.xforce.ibmcloud.com/vulnerabilities/6402

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free