CVE-2001-0746

CVE-2001-0746 describes a critical buffer overflow vulnerability in the Web Publisher component of iPlanet Web Server Enterprise Edition 4.1 and earlier. This flaw allows unauthenticated remote attackers to trigger a denial of service or potentially execute arbitrary code by sending a crafted, excessively long URI request utilizing methods such as GETPROPERTIES or GETATTRIBUTENAMES. The vulnerability carries a CVSS score of 10.0 (Critical), indicating a highly severe threat with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score is 98/100, further emphasizing its critical nature. While not listed on the CISA KEV catalog, exploit code for this vulnerability is publicly available on ExploitDB (EDB-20852 and EDB-20853). Despite its age and the availability of exploits, there is no recorded social media discussion or media coverage, suggesting a lack of active community attention or widespread exploitation in recent times.