Vulnerability Details CVE-2001-0252
iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://marc.info/?l=bugtraq&m=98035833331446&w=2
- http://www.securityfocus.com/archive/1/157641
- http://www.securityfocus.com/bid/2282
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5983
- http://marc.info/?l=bugtraq&m=98035833331446&w=2
- http://www.securityfocus.com/archive/1/157641
- http://www.securityfocus.com/bid/2282
- https://exchange.xforce.ibmcloud.com/vulnerabilities/5983
Products affected by CVE-2001-0252
-
cpe:2.3:a:iplanet:iplanet_enterprise_server:4.1sp5