|
|
| |
| A buffer overflow exists in iPlanet Web Server 4.x that can lead to Denial-of-Service or remote execution of code. If 'Parsed HTML' option (server side parsing) was disabled the vulnerability will not manifest itself. |
| |
Credit:
The information has been provided by Vanja Hrustic, Fyodor Yarochkin and Thomas Dullien.
|
| |
By sending a request of 198-240 characters (depending on the iWS version/platform) with extension .shtml (by default), it is possible to overflow internal buffer in stack. iWS must have server side 'parsing' turned on. By default (when enabled), .shtml files are parsed.
The overflow happens in the logging function (when iWS tries to report that file is not found). If the exploitation was successful (or iWS segfaults), nothing will remain in the logs.
Temporary Workaround:
Disable server side parsing of HTML pages.
|
|
|
|
|
|
|
|
