CVE-2001-0327 | BDVDB-2026-3489 Detail

Description#

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert4.16.html
http://www.atstake.com/research/advisories/2001/a041601-1.txt
http://www.kb.cert.org/vuls/id/276767
http://www.osvdb.org/5704

Exploit#

No public exploit known

History#

Version 12002-03-09Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.