iPlanet Chunked Encoding Processing Remote Overflow

high Nessus Plugin ID 11068

Synopsis

The remote applicaiton server is affected by a buffer overflow vulnerability.

Description

This host is running the Sun One/iPlanet web server 4.1 or 6.0. This web server contains an unchecked buffer in the 'Chunked Encoding' processing routines. By issuing a malformed request to the web server, a potential intruder can 'POST' extraneous data and cause the web server process to execute arbitrary code. This allows the potential intruder to gain access to this host.

Solution

The vendor has released Sun ONE web server 4.1 service pack 11 and 6.0 service pack 4 to fix this issue.

Plugin Details

Severity: High

ID: 11068

File Name: iplanet_chunked_encoding.nasl

Version: 1.30

Type: remote

Family: Web Servers

Published: 8/9/2002

Updated: 11/15/2018

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.4

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 6.2

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Required KB Items: Settings/ParanoidReport, www/iplanet

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/23/2002

Vulnerability Publication Date: 4/9/2004

Exploitable With

CANVAS (CANVAS)

Reference Information

CVE: CVE-2002-0845

BID: 5433

Detections

Analytics