CVE-2001-0252

  • Last update: Apr 13, 2023

Description

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.

Software From Fixed in
iplanet / iplanet_enterprise_server 4.1sp5 4.1sp5.x

Details

    • Severity: Medium
  • CVE: CVE-2001-0252
  • Published: Jun 2, 2001
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:N/A:P