IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
References
Link | Resource |
---|---|
ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt | Exploit Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=103244572803950&w=2 | |
http://www.iss.net/security_center/static/10140.php | Vendor Advisory |
http://www.osvdb.org/2092 | |
http://www.securityfocus.com/bid/5749 |
Configurations
History
No history.
Information
Published : 2002-10-11 04:00
Updated : 2024-02-28 10:24
NVD link : CVE-2002-1153
Mitre link : CVE-2002-1153
CVE.ORG link : CVE-2002-1153
JSON object : View
Products Affected
ibm
- websphere_application_server
CWE