Apple Personal Web Sharing vulnerabilities

2 CVEs affecting Apple Personal Web Sharing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-1575, published 2001-12-31.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2001-0649, published 2001-09-20. Medium severity, CVSS 5.0. EPSS: 5.1% chance of exploitation in the next 30 days. Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.
• CVE-2001-1575, published 2001-12-31. Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days. Apple Personal Web Sharing (PWS) 1.1, 1.5, and 1.5.5, when Web Sharing authentication is enabled, allows remote attackers to cause a denial of service via a long password, possibly due to a buffer…