Unscored CVE-2001-0252 EUVD-2001-0252GHSA-7qx6-982c-4h2w

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that con…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

iPlanet (formerly Netscape) Enterprise Server 4.1 allows remote attackers to cause a denial of service via a long HTTP GET request that contains many "/../" (dot dot) sequences.

References

20010124 iPlanet FastTrack/Enterprise 4.1 DoS clarifications mailing-list
20010122 def-2001-04: Netscape Enterprise Server Dot-DoS mailing-list
2282 vdb-entry
netscape-enterprise-dot-dos(5983) vdb-entry