iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
References
Link | Resource |
---|---|
http://www.securityfocus.com/archive/1/157641 | Vendor Advisory |
http://www.securityfocus.com/bid/2282 | Vendor Advisory |
http://marc.info/?l=bugtraq&m=98035833331446&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/5983 |
Configurations
Information
Published : 2001-06-01 21:00
Updated : 2017-10-09 18:29
NVD link : CVE-2001-0252
Mitre link : CVE-2001-0252
JSON object : View
CWE
Products Affected
iplanet
- iplanet_enterprise_server