■シグネチャの説明
iPlanet Netscape Enterprise Server HTTP method name buffer overflow
http://www.iss.net/security_center/static/7320.php
■参照事項
Digizen Security Group advisory, 2001
Netscape Enterprise Server 4 Method and URI overflow
http://online.securityfocus.com/archive/1/185550
Important iPlanet Web Server 4.1 SP 3-7 Product Alert: May 11, 2001
Recommend Immediate Patch/Upgrade
http://iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html
CVE
CAN-2001-0747
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0747
■実証コード
C:\>1.pl 192.168.221.180 80
HTTP/1.1 400 Bad Request
Server: Microsoft-IIS/5.0
Date: Sun, 11 Dec 2005 02:15:44 GMT
Content-Type: text/html
Content-Length: 87
<html><head><title>Error</title></head><body>The parameter is incorrect. </body></html>
HTTP/1.1 400 Bad Request
Server: Microsoft-IIS/5.0
Date: Sun, 11 Dec 2005 02:15:59 GMT
Content-Type: text/html
Content-Length: 87
<html><head><title>Error</title></head><body>The parameter is incorrect. </body></html>