Lucene search

[email protected]CVE-2001-0746

HistoryOct 18, 2001 - 4:00 a.m.

CVE-2001-0746

2001-10-1804:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2001-0746

buffer overflow

iplanet web server

remote attacks

uri request

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.8%

JSON

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.

CPENameOperatorVersion
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp4
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp5
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp7
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp6
iplanet:iplanet_web_serveriplanet iplanet web servereq4.1_sp3

CPE	Name	Operator	Version
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp4
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp5
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp7
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp6
iplanet:iplanet_web_server	iplanet iplanet web server	eq	4.1_sp3

References

archives.neohapsis.com/archives/bugtraq/2001-05/0132.html

iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html

www.securityfocus.com/bid/2732

exchange.xforce.ibmcloud.com/vulnerabilities/6554

8.9 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.029 Low

EPSS

Percentile

90.8%

JSON

Related for CVE-2001-0746

cvelist1