CVE-2000-1077 Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
HighCVSS 10.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet web server | = 4.x | No fix listed |
References
- 20001026 Buffer overflow in iPlanet Web Server 4 server side SHTML parsing module mailing-list patch vendor-advisory
- iplanet-web-server-shtml-bo(5446) vdb-entry