CVE

Id
3553  
CVE No.
CVE-2001-0746  
Status
Candidate  
Description
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.  
Phase
Proposed (20011012)  
Votes
ACCEPT(6) Armstrong, Baker, Cole, Foat, Frech, Wall | NOOP(1) Christey  
Comments
Christey> HP:HPSBUX0106-152 might address CVE-2001-0746 or | CVE-2001-0747, or maybe neither, but only HP knows for sure. | See: http://archives.neohapsis.com/archives/hp/2001-q2/0059.html | Christey> I am about to create a separate candidate for the HP advisory. | Obviously that advisory is affected by CD:VAGUE.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
15618 3553 CVE-2001-0746 BUGTRAQ:20010515 iPlanet - Netscape Enterprise Web Publisher Buffer Overflow  View
15619 3553 CVE-2001-0746 URL:http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html  View
15620 3553 CVE-2001-0746 CONFIRM:http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html  View
15621 3553 CVE-2001-0746 XF:netscape-enterprise-uri-bo(6554)  View
15622 3553 CVE-2001-0746 URL:http://xforce.iss.net/static/6554.php  View
15623 3553 CVE-2001-0746 BID:2732  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64097 JVNDB-2001-000071 iPlanet Web Publisher におけるリモートからのバッファオーバーフローの脆弱性 iPlanet Web Server において、異常に長い文字列を含む悪意あるリクエストを受信した場合、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2001-0746 3553 10 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000071.html  View