BID:18578

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

CVE-2006-3231 | CVE-2006-3232 |

Info

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

Bugtraq ID:	18578
Class:	Unknown
CVE:	CVE-2006-3231 CVE-2006-3232
Remote:	Yes
Local:	No
Published:	Jun 21 2006 12:00AM
Updated:	Jul 06 2007 07:17PM
Credit:	These issues were disclosed by the vendor.
Vulnerable:	IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0 IBM Websphere Application Server 5.1.1 .9 IBM Websphere Application Server 5.1.1 .8 IBM Websphere Application Server 5.1.1 .7 IBM Websphere Application Server 5.1.1 .6 IBM Websphere Application Server 5.1.1 .5 IBM Websphere Application Server 5.1.1 .4 IBM Websphere Application Server 5.1.1 .3 IBM Websphere Application Server 5.1.1 .2 IBM Websphere Application Server 5.1.1 .10 IBM Websphere Application Server 5.1.1 .1 IBM Websphere Application Server 5.1.1 IBM Websphere Application Server 5.1 .0.5 IBM Websphere Application Server 5.1 .0.4 IBM Websphere Application Server 5.1 .0.3 IBM Websphere Application Server 5.1 .0.2 IBM Websphere Application Server 5.1 IBM Websphere Application Server 5.0.2 .9 IBM Websphere Application Server 5.0.2 .8 IBM Websphere Application Server 5.0.2 .7 IBM Websphere Application Server 5.0.2 .6 IBM Websphere Application Server 5.0.2 .5 IBM Websphere Application Server 5.0.2 .4 IBM Websphere Application Server 5.0.2 .3 IBM Websphere Application Server 5.0.2 .2 IBM Websphere Application Server 5.0.2 .16 IBM Websphere Application Server 5.0.2 .15 IBM Websphere Application Server 5.0.2 .14 IBM Websphere Application Server 5.0.2 .13 IBM Websphere Application Server 5.0.2 .12 IBM Websphere Application Server 5.0.2 .11 IBM Websphere Application Server 5.0.2 .10 IBM Websphere Application Server 5.0.2 .1 IBM Websphere Application Server 5.0.2 IBM Websphere Application Server 5.0.1 IBM Websphere Application Server 5.0 IBM Websphere Application Server 4.0.4 IBM Websphere Application Server 4.0.3 IBM Websphere Application Server 3.5.3 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.5.2 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.5.1 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.5 IBM Websphere Application Server 3.0.2 .1 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.0.2 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.0 .2.4 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.0 .2.3 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.0 .2.2 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc IBM Websphere Application Server 3.0 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Novell Netware 5.0 - Sun Solaris 8_sparc IBM Websphere Application Server 2.0 - IBM AIX 4.3 - Linux kernel 2.3 .x - Microsoft Windows NT 4.0 - Novell Netware 5.0 - Sun Solaris 8_sparc

Not Vulnerable:	IBM Websphere Application Server 6.0.2 .11

Discussion

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

IBM WebSphere Application Server is prone to multiple vulnerabilities.

These issues include vulnerabilities of unknown impact as well as serveral information-disclosure vulnerabilities. Other potentially security-related issues were also addressed.

Exploit / POC

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

Some of these issues may be exploitable through a browser; others may require working exploits.

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Solution / Fix

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

Solution:
The vendor has released updated versions to address these issues. Contact the vendor for details on obtaining the appropriate updates.

References

IBM Websphere Application Server Prior to 6.0.2.11 Multiple Vulnerabilities

References: