CVE-2001-0746 Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a l...
HighCVSS 10.0
EPSS 15.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iplanet web server | = 4.1_sp3 | No fix listed |
| iplanet web server | = 4.1_sp4 | No fix listed |
| iplanet web server | = 4.1_sp5 | No fix listed |
| iplanet web server | = 4.1_sp6 | No fix listed |
| iplanet web server | = 4.1_sp7 | No fix listed |
References
- 20010515 iPlanet - Netscape Enterprise Web Publisher Buffer Overflow mailing-list patch vendor-advisory
- iplanet.com patch vendor-advisory
- 2732 exploit patch vdb-entry vendor-advisory
- netscape-enterprise-uri-bo(6554) vdb-entry