PT-2001-1456 · Biblioweb · Biblioweb Web Server

Publicado 2001-03-09 · Atualizado 2008-09-05 · CVE-2001-0227

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BiblioWeb web server version 2.0

Description The issue is related to a buffer overflow in the BiblioWeb web server, which can be triggered by a long HTTP GET request. This can cause a denial of service and potentially allow remote attackers to execute arbitrary commands.

Recommendations For BiblioWeb web server version 2.0, consider restricting the length of HTTP GET requests to prevent buffer overflow exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2001-0227

Produtos afetados

Biblioweb Web Server

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2001-0227 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html · Aviso do Fabricante