CVE-2000-1077 — Improper Restriction of Operations within the Bounds of a Memory Buffer in WEB Server

4 documents4 sources
Severity
10.0CRITICALNVD
EPSS
2.4%
top 14.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Iplanet WEB Server
Timeline
PublishedDec 11
Latest updateApr 30

Description

Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows remote attackers to execute arbitrary commands via a long filename with a .shtml extension.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-222r-4v3h-874c: Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4↗2022-04-30
▶
CVEList
CVE-2000-1077: Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4↗2001-01-22
▶

💥Exploits & PoCs

1
Exploit-DB
Citrix Metaframe 1.0/1.8 - Weak Encryption↗2000-03-29
▶
CVE-2000-1077 — Iplanet WEB Server vulnerability | cvebase