CVE-2001-0419

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 24.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-07-02 · updated 2026-06-16

Description

Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.8.2, allows remote attackers to execute arbitrary commands via a long HTTP request that is passed to the application server, such as /jsp/.

Affected products

Oracle Application Server: 4.0.8.2

References

http://marc.info/?l=bugtraq&m=98692227816141&w=2
http://www.securityfocus.com/bid/2569
http://marc.info/?l=bugtraq&m=98692227816141&w=2
http://www.securityfocus.com/bid/2569

Get alerted when CVE-2001-0419 or the next vulnerability affects your stack