CVE-2001-0327 iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in t...
MediumCVSS 5.0
EPSS 3.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet web server | <= 4.1_enterprise | No fix listed |
References
- A041601-1 patch vendor-advisory
- www.iplanet.com
- VU#276767 third-party-advisory us-government-resource
- 5704 vdb-entry