CVE-2001-0746
iPlanet Web Server Enterprise Edition <= 4.1 - Buffer Overflow via Long URI in Web Publisher
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2001-0746. PoCs published by Gabriel Maggiotti, Santi Claus.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in iPlanet Web Server (Netscape Enterprise Server 4) by sending a crafted HTTP request with an oversized method or URI (4022 bytes). The PoC demonstrates a denial-of-service (DoS) condition, though the description suggests potential for remote code execution (RCE) with proper structuring.
Description
Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.
Exploits (2)
This exploit targets a buffer overflow vulnerability in iPlanet Web Server (Netscape Enterprise Server 4) by sending a crafted HTTP request with an oversized method or URI (4022 bytes). The PoC demonstrates a denial-of-service (DoS) condition, though the description suggests potential for remote code execution (RCE) with proper structuring.
This exploit targets a buffer overflow vulnerability in iPlanet Web Server 4.1 SP3-7 on Windows NT by sending a crafted HTTP request with a long string of 'A' characters. It demonstrates a denial-of-service (DoS) condition and potential for remote code execution (RCE) if the buffer is properly structured.