critical10.0Public exploit code
CVE-2001-1067
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Aut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- AOLServer 3 - 'Authentication String' Remote Buffer Overflow (2)2001-09-05 · remote · unix · Verified
- AOLServer 3 - 'Authentication String' Remote Buffer Overflow (1)2001-08-22 · remote · unix · Verified
Impact
Buffer overflow in AOLserver 3.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via an HTTP request with a long Authorization header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aol | Aol Server | Versions 3.0, 3.2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html
- http://www.securityfocus.com/archive/1/213041
- http://www.securityfocus.com/bid/3230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7030
- http://archives.neohapsis.com/archives/bugtraq/2001-08/0325.html
- http://www.securityfocus.com/archive/1/213041
- http://www.securityfocus.com/bid/3230
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7030