CVE-2001-0390

Published: Jul 2, 2001Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.

Affected (8)

Products: Ibm: Net.commerce, Net.commerce Hosting Server, Websphere Application Server

Ibm

3 products

Net.commerce

Net.commerce Hosting Server

Websphere Application Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Net.commerce	Version 2.0
Ibm Net.commerce	Version 3.0
Ibm Net.commerce	Version 3.1.1
Ibm Net.commerce	Version 3.1.2
Ibm Net.commerce	Version 3.1
Ibm Net.commerce Hosting Server	Version 3.1.1
Ibm Net.commerce Hosting Server	Version 3.1.2
Ibm Websphere Application Server	Version 5.1.0.3

References (4)

http://www.securityfocus.com/archive/1/176100

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/2588

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/176100

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/2588

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

Timeline

No history available yet.