CVEvulnerability

CVE-2001-0746

10.0 HIGH Published 2001-10-18 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2001-10-18
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.

Affected configurations

• iplanet iplanet web server 4.1 sp3 • iplanet iplanet web server 4.1 sp4 • iplanet iplanet web server 4.1 sp5 • iplanet iplanet web server 4.1 sp6 • iplanet iplanet web server 4.1 sp7

References

http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html Patch, Vendor Advisory
http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html Patch, Vendor Advisory
http://www.securityfocus.com/bid/2732 Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6554 exchange.xforce.ibmcloud.com
http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html Patch, Vendor Advisory
http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html Patch, Vendor Advisory
http://www.securityfocus.com/bid/2732 Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6554 exchange.xforce.ibmcloud.com