Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-1067
cve-2001-1067
aolserver 3.0
buffer overflow
dos
remote attack
arbitrary code execution
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.4%
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Affected configurations
Node
aolaol_serverMatch3.0
ORaolaol_serverMatch3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| aol:aol_server | aol aol server | eq | 3.0 |
| aol:aol_server | aol aol server | eq | 3.2 |
Related
nvd
nvd
CVE-2001-1067
2001-08-31 04:00:00
cvelist
cvelist
CVE-2001-1067
2002-03-09 05:00:00
cert
cert
AOLServer contains buffer overflow in ParseAuth()
2001-09-26 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.8 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.4%
Related for CVE-2001-1067