Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.
| Software | From | Fixed in |
|---|---|---|
| iplanet / iplanet_web_server | 4.1_sp3 | 4.1_sp3.x |
| iplanet / iplanet_web_server | 4.1_sp4 | 4.1_sp4.x |
| iplanet / iplanet_web_server | 4.1_sp5 | 4.1_sp5.x |
| iplanet / iplanet_web_server | 4.1_sp6 | 4.1_sp6.x |
| iplanet / iplanet_web_server | 4.1_sp7 | 4.1_sp7.x |