PT-2001-1456 · Biblioweb · Biblioweb Web Server

Published 2001-03-09 · Updated 2008-09-05 · CVE-2001-0227

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions BiblioWeb web server version 2.0

Description The issue is related to a buffer overflow in the BiblioWeb web server, which can be triggered by a long HTTP GET request. This can cause a denial of service and potentially allow remote attackers to execute arbitrary commands.

Recommendations For BiblioWeb web server version 2.0, consider restricting the length of HTTP GET requests to prevent buffer overflow exploitation until a patch is available.

Fix

Related Identifiers

CVE-2001-0227

Affected Products

Biblioweb Web Server

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2001-0227 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2001-02/0075.html · Vendor Advisory