IBM Tivoli Monitoring Web Health Console Multiple Denial of Service Vulnerabilities

Bugtraq ID:	15011
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 05 2005 12:00AM
Updated:	Oct 05 2005 12:00AM
Credit:	The vendor reported these issues.
Vulnerable:	IBM Tivoli Monitoring for Web Infrastructure 5.1.2 IBM Tivoli Monitoring for Web Infrastructure 5.1 IBM Tivoli Monitoring for Web Infrastructure 5.0
Not Vulnerable:

IBM Tivoli Monitoring Web Health Console Multiple Denial of Service Vulnerabilities

IBM Tivoli Monitoring is affected by multiple remote denial of service vulnerabilities. These issues affect the application because of an old version of IBM HTTP Server (prior to 1.3.28) shipped with the Web Health Console of Tivoli Monitoring.

All versions of Tivoli Monitoring shipped with IBM HTTP Server (prior to 1.3.28) are vulnerable to these issues.

IBM Tivoli Monitoring Web Health Console Multiple Denial of Service Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

IBM Tivoli Monitoring Web Health Console Multiple Denial of Service Vulnerabilities

Solution:
IBM has released an advisory to address these issues. Please see the referenced advisory for more information about obtaining fixes.

IBM Tivoli Monitoring Web Health Console Multiple Denial of Service Vulnerabilities

References:

• Older versions of Apache (or IBM HTTP Server) shipped with Web Health Console (IBM)
  
• Tivoli Software (IBM)