CNCVE编号：CNCVE-20010419 CVE编号：CAN-2001-0419 安全级别：高 漏洞中文描述： iPlanet Web Server 4.1的共享的库ndwfn4.so中存在缓冲区溢出，当iWS作为Oracle application server 4.0.8.2的网络侦听器使用时，允许远程攻击者向应用程序发送长的HTTP请求来执行任意命令。 漏洞英文描述： Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application。 漏洞参考： Reference: BUGTRAQ:20010410 Oracle Application Server shared library buffer overflow Reference: URL:http://marc.theaimsgroup.com/?l=bugtraq&m=98692227816141&w=2 Reference: BID:2569 Reference: URL:http://www.securityfocus.com/bid/2569 系统类型：其他 漏洞类型：输入有效性检查错误