积极预防 及时发现
快速响应 力保恢复
iPlanet Web Server Enterprise Edition 4.1及其早期版本中的缓...
发布时间:2001-10-18 信息来源:管理员

CNCVE编号:CNCVE-20010746 CVE编号:CAN-2001-0746 安全级别:高 漏洞中文描述: iPlanet Web Server Enterprise Edition 4.1及其早期版本中的缓冲区溢出允许远程攻击者通过一个带有GETPROPERTIES或 GETATTRIBUTENAME的URL请求来引发拒绝服务及可能执行任意代码。 漏洞英文描述: Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAME 漏洞参考: Reference: BUGTRAQ:20010515 iPlanet - Netscape Enterprise Web Publisher Buffer Overflow Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html Reference: CONFIRM:http://iplanet.com/products/iplanet_web_enterprise/iwsalert5 系统类型: Win2000/NT 漏洞类型:输入有效性检查错误