CVE-2001-0252 iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
MediumCVSS 5.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet enterprise server | = 4.1sp5 | No fix listed |
References
- 20010124 iPlanet FastTrack/Enterprise 4.1 DoS clarifications mailing-list
- 20010122 def-2001-04: Netscape Enterprise Server Dot-DoS mailing-list vendor-advisory
- 2282 vdb-entry vendor-advisory
- netscape-enterprise-dot-dos(5983) vdb-entry