TI-2001-00325 Aliases CVE-2001-0327 GHSA-pqgv-mxxh-ccp2

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve…

LOW 28Published 2002-03-09 · Updated 2024-08-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: — Not recorded in CVSS 2.0
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: Partial · None · None
Fix status: No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to retrieve sensitive data from memory allocation pools, or cause a denial of service, via a URL-encoded Host: header in the HTTP request, which reveals memory in the Location: header that is returned by the server.

Why it matters now

EPSS 0.0312 87th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:iplanet:iplanet_web_server::::::::	up to 4.1_enterprise	Vulnerable	Iplanet

cpe:2.3:a:iplanet:iplanet_web_server:*:*:*:*:*:*:*:* Versions up to 4.1_enterprise Vulnerable ·Iplanet

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2001-0327
2026-10-03 Alias added: GHSA-pqgv-mxxh-ccp2

References

Patch 1

A041601-1

Advisory 1

VU#276767

Other 2

TI-2001-00717 Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier… CVSS 2.0HIGH 10.0
TI-2000-01066 Buffer overflow in the SHTML logging functionality of iPlanet Web Server 4.x allows… CVSS 2.0HIGH 10.0
TI-2002-00820 Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to… CVSS 2.0HIGH 7.5
TI-2001-00424 Vulnerability in iPlanet Web Server Enterprise Edition 4.x. CVSS 2.0HIGH 10.0
TI-2002-00664 Buffer overflow in the search component for iPlanet Web Server (iWS) 4.1 and Sun ONE Web… CVSS 2.0HIGH 7.5
TI-2002-01575 iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows… CVSS 2.0HIGH 7.5

See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences