CVE-2001-0327
Last modified
CVE-2001-0327 is a vulnerability of currently unknown severity. iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.. EPSS estimates a 3.12% chance of exploitation in the next 30 days.
Description
iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iplanet | Iplanet Web Server | <= 4.1_enterprise |
References
- http://www.atstake.com/research/advisories/2001/a041601-1.txtPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/276767US Government Resource
- http://www.atstake.com/research/advisories/2001/a041601-1.txtPatch, Vendor Advisory
- http://www.kb.cert.org/vuls/id/276767US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2001-0327?
How severe is CVE-2001-0327?
How do I fix CVE-2001-0327?
Are you affected by CVE-2001-0327?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
