iPlanet Web Publisher远程缓冲区溢出漏洞

漏洞信息详情

iPlanet Web Publisher远程缓冲区溢出漏洞

• CNNVD编号：CNNVD-200110-114
• 危害等级： 超危
  
  
• CVE编号：
  CVE-2001-0746
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2001-10-18
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2006-09-22
  
• 厂        商：
  
  iplanet
• 漏洞来源：
  Reported to bugtra…

iPlanet Web Server Enterprise Edition 4.1版本及之前版本的Web Publisher存在缓冲区溢出漏洞。远程攻击者可以借助带有(1)GETPROPERTIES、(2)GETATTRIBUTENAMES或其他方法的超长URI的请求导致服务拒绝并且可能执行任意代码。

iPlanet has made a NSAPI patch available.
This issue will also be addressed by the release of iPlanet Web Server, Enterprise Edition version 4.1 Service Pack 8.
HP VirtualVault 4.0

• HP PHSS_24108
  
  http://itrc.hp.com

iPlanet E-Commerce Solutions iPlanet Web Server Enterprise Edition 4.1 SP3

• iPlanet E-Commerce Solutions aix_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/aix_flexlog2.tgz
• iPlanet E-Commerce Solutions dec-osf1_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/dec-osf1_flexlog2.t
  gz
• iPlanet E-Commerce Solutions hpux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/hpux_flexlog2.tgz
• iPlanet E-Commerce Solutions linux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/linux_flexlog2.tgz
• iPlanet E-Commerce Solutions solaris_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/solaris_flexlog2.tg
  z
• iPlanet E-Commerce Solutions winnt_flexlog2.zip
  
  http://iplanet.com/products/iplanet_web_enterprise/winnt_flexlog2.zip

iPlanet E-Commerce Solutions iPlanet Web Server Enterprise Edition 4.1 SP6

• iPlanet E-Commerce Solutions aix_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/aix_flexlog2.tgz
• iPlanet E-Commerce Solutions dec-osf1_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/dec-osf1_flexlog2.t
  gz
• iPlanet E-Commerce Solutions hpux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/hpux_flexlog2.tgz
• iPlanet E-Commerce Solutions linux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/linux_flexlog2.tgz
• iPlanet E-Commerce Solutions solaris_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/solaris_flexlog2.tg
  z
• iPlanet E-Commerce Solutions winnt_flexlog2.zip
  
  http://iplanet.com/products/iplanet_web_enterprise/winnt_flexlog2.zip

iPlanet E-Commerce Solutions iPlanet Web Server Enterprise Edition 4.1 SP5

• iPlanet E-Commerce Solutions aix_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/aix_flexlog2.tgz
• iPlanet E-Commerce Solutions dec-osf1_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/dec-osf1_flexlog2.t
  gz
• iPlanet E-Commerce Solutions hpux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/hpux_flexlog2.tgz
• iPlanet E-Commerce Solutions linux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/linux_flexlog2.tgz
• iPlanet E-Commerce Solutions solaris_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/solaris_flexlog2.tg
  z
• iPlanet E-Commerce Solutions winnt_flexlog2.zip
  
  http://iplanet.com/products/iplanet_web_enterprise/winnt_flexlog2.zip

iPlanet E-Commerce Solutions iPlanet Web Server Enterprise Edition 4.1 SP7

• iPlanet E-Commerce Solutions aix_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/aix_flexlog2.tgz
• iPlanet E-Commerce Solutions dec-osf1_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/dec-osf1_flexlog2.t
  gz
• iPlanet E-Commerce Solutions hpux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/hpux_flexlog2.tgz
• iPlanet E-Commerce Solutions linux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/linux_flexlog2.tgz
• iPlanet E-Commerce Solutions solaris_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/solaris_flexlog2.tg
  z
• iPlanet E-Commerce Solutions winnt_flexlog2.zip
  
  http://iplanet.com/products/iplanet_web_enterprise/winnt_flexlog2.zip

iPlanet E-Commerce Solutions iPlanet Web Server Enterprise Edition 4.1 SP4

• iPlanet E-Commerce Solutions aix_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/aix_flexlog2.tgz
• iPlanet E-Commerce Solutions dec-osf1_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/dec-osf1_flexlog2.t
  gz
• iPlanet E-Commerce Solutions hpux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/hpux_flexlog2.tgz
• iPlanet E-Commerce Solutions linux_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/linux_flexlog2.tgz
• iPlanet E-Commerce Solutions solaris_flexlog2.tgz
  
  http://iplanet.com/products/iplanet_web_enterprise/solaris_flexlog2.tg
  z
• iPlanet E-Commerce Solutions winnt_flexlog2.zip
  
  http://iplanet.com/products/iplanet_web_enterprise/winnt_flexlog2.zip

来源: XF
名称: netscape-enterprise-uri-bo(6554)
链接:http://xforce.iss.net/static/6554.php

来源: BID
名称: 2732
链接:http://www.securityfocus.com/bid/2732

来源: iplanet.com
链接:http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html

来源: BUGTRAQ
名称: 20010515 iPlanet – Netscape Enterprise Web Publisher Buffer Overflow
链接:http://archives.neohapsis.com/archives/bugtraq/2001-05/0132.html