CVE-2001-0327: Medium severity iPlanet iPlanet Web Server vulnerability

Q: What is the severity of CVE-2001-0327?

CVE-2001-0327 is considered a critical vulnerability due to its potential to expose sensitive data and cause denial of service.

Q: How do I fix CVE-2001-0327?

The recommended fix for CVE-2001-0327 is to upgrade to a version of iPlanet Web Server later than 4.1 Enterprise.

Q: What type of attacks can exploit CVE-2001-0327?

CVE-2001-0327 can be exploited by remote attackers using a specially crafted URL-encoded Host: header.

Q: What systems are affected by CVE-2001-0327?

CVE-2001-0327 affects iPlanet Web Server Enterprise Edition versions 4.1 and earlier.

Q: What are the potential impacts of CVE-2001-0327?

The potential impacts of CVE-2001-0327 include exposure of sensitive data from memory allocation pools and denial of service.

Published Jul 2, 2001

Updated

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.

Affected Software

1 affected component

iPlanet iPlanet Web Server<=4.1_enterprise

Remediation

Patch Available

http://www.atstake.com/research/advisories/2001/a041601-1.txt

Event History

Jul 2, 2001

CVE Published

04:00 AM

Mar 9, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0327?

CVE-2001-0327 is considered a critical vulnerability due to its potential to expose sensitive data and cause denial of service.

How do I fix CVE-2001-0327?

The recommended fix for CVE-2001-0327 is to upgrade to a version of iPlanet Web Server later than 4.1 Enterprise.

What type of attacks can exploit CVE-2001-0327?