CVE:CVE-2001-0746
CNNVD:CNNVD-200110-114
iPlanet Web Server Enterprise Edition 4.1版本及之前版本的Web Publisher存在缓冲区溢出漏洞。远程攻击者可以借助带有(1)GETPROPERTIES、(2)GETATTRIBUTENAMES或其他方法的超长URI的请求导致服务拒绝并且可能执行任意代码。
solution:Upgrade iplanet iplanet_web_server to a higher version than 4.1_sp3,4.1_sp4,4.1_sp5,4.1_sp6,4.1_sp7,and avoid the version 4.1_sp3,4.1_sp4,4.1_sp5,4.1_sp6,4.1_sp7