CVE-2001-0852 Denial of service in n/a

What is CVE-2001-0852?

CVE-2001-0852 is a medium-severity denial of service vulnerability in Redhat Linux, published on 9 Mar 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.

Which versions are affected by CVE-2001-0852?

It affects 1 product.

Products include Redhat Linux.

How do I fix CVE-2001-0852?

No fix has been published for CVE-2001-0852 yet. Limit exposure of the affected software until one is available.

Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.

Is CVE-2001-0852 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2001-0852 exists.

Public exploit code: 1 Exploit-DB entry.

Other vulnerabilities in Redhat Linux

• CVE-2000-1220 Privilege escalation in n/a Critical 10.0
• CVE-2003-0248 Privilege escalation in n/a Critical 10.0
• CVE-1999-1542 Command injection in n/a Critical 10.0
• CVE-1999-1299 Privilege escalation in n/a Critical 10.0
• CVE-2000-0322 Command injection in n/a Critical 10.0

All Redhat Linux vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-x995-3jq6-p477.