PT-2001-1552 · Oracle · Iplanet Web Server Enterprise Edition

Publicado 2001-07-02 · Atualizado 2008-09-05 · CVE-2001-0327

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions iPlanet Web Server Enterprise Edition versions 4.1 and earlier

Description The issue allows remote attackers to retrieve sensitive data from memory allocation pools or cause a denial of service. This is achieved via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header returned by the server.

Recommendations For iPlanet Web Server Enterprise Edition versions 4.1 and earlier, update to a version later than 4.1 to resolve the issue.

Correção

Identificadores relacionados

CVE-2001-0327

Produtos afetados

Iplanet Web Server Enterprise Edition

Referências · 5

• http://osvdb.org/5704 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0327 · Nota de Segurança
• http://kb.cert.org/vuls/id/276767 · Nota
• http://atstake.com/research/advisories/2001/a041601-1.txt · Aviso do Fabricante
• http://iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html · Nota