CNCVE编号:CNCVE-20010747 CVE编号:CAN-2001-0747 安全级别:高 漏洞中文描述: iPlanet Web Server (iWS) Enterprise Edition 4.1,service packs 3 到7中的缓冲区溢出允许远程攻击者通过HTTP请求中的一个长方法名来引发拒绝服务及可能执行任意代码。 漏洞英文描述: Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of sevice and possibly execute arbitrary code via a long method name in an HTTP request. 漏洞参考: Reference: BUGTRAQ:20010518 Netscape Enterprise Server 4 Method and URI overflow Reference: URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0203.html Reference: CONFIRM:http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert5.11 系统类型: Win2000/NT 漏洞类型:输入有效性检查错误