iPlanet Web Publisher Remote Buffer Overflow Vulnerability

iPlanet Web Server, a high performance, highly customizable, enterprise-based Web server, is the Web Server package distributed by the Sun Microsystems/Netscape Alliance.

iPlanet Web Server contains a problem in the software that could lead to a denial of service. The problem occurs in the handling of long Uniform Resource Identifiers (URI) and Methods, and can be exploited by a remote user.

The Web server ceases operation, and requires a manual restart or watchdog process to resume normal operation.

Note: iPlanet Server Version 4.1 running service packs 3 to 7 are the only versions known to be vulnerable to this attack. If you've already applied the appropriate fix, then you can safely ignore this warning.

Only the Microsoft Windows platform is immediately vulnerable; however, all customers should install the NSAPI patch, which is available at http://www.iplanet.com/products/iplanet_web_enterprise/iwsalert5.11.html.