PT-2001-2659 · Apple · Personal Web Sharing

Published 2001-12-31 · Updated 2017-07-11 · CVE-2001-1575

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Apple Personal Web Sharing (PWS) versions 1.1, 1.5, and 1.5.5

Description The issue allows remote attackers to cause a denial of service, possibly due to a buffer overflow, when Web Sharing authentication is enabled and a long password is used.

Recommendations For Apple Personal Web Sharing (PWS) version 1.1, consider disabling Web Sharing authentication until a fix is available. For Apple Personal Web Sharing (PWS) version 1.5, restrict the length of passwords to prevent potential buffer overflows. For Apple Personal Web Sharing (PWS) version 1.5.5, avoid using long passwords in Web Sharing authentication to minimize the risk of denial of service.

Fix

Related Identifiers

CVE-2001-1575

Affected Products

Personal Web Sharing

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1575 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6759 · Note
• http://securityfocus.com/bid/2945 · Note
• http://cert.uni-stuttgart.de/archive/bugtraq/2001/06/msg00409.html · Note