IBM WebSphere Application Server 6.1.0 Multiple Vulnerabilities

Bugtraq ID:	19463
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 10 2006 12:00AM
Updated:	Aug 11 2006 05:05PM
Credit:	Reported by the vendor.
Vulnerable:	IBM Websphere Application Server 6.1
Not Vulnerable:	IBM Websphere Application Server 6.1 .1

IBM WebSphere Application Server 6.1.0 Multiple Vulnerabilities

IBM WebSphere Application Server is prone to multiple unspecified vulnerabilities. These vulnerabilities affect the following components:
- SOAP
- ThreadIdentitySupport
- mbean
- wsadmin

Additionally, several information-disclosure issues have been identified in log files and traces.

IBM WebSphere Application Server version 6.1.0 is vulnerable to these issues.

IBM WebSphere Application Server 6.1.0 Multiple Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Some of these issues likely do not require specific exploit code.

IBM WebSphere Application Server 6.1.0 Multiple Vulnerabilities

Solution:
IBM has released WebSphere Application Server 6.1.0 Fix Pack 1 to address these issues. Please see the references for more information.

IBM WebSphere Application Server 6.1.0 Multiple Vulnerabilities

References:

• 6.1.0.1: WebSphere Application Server V6.1.0 Fix Pack 1 for Windows (IBM)
  
• Fix list for WebSphere Application Server Version 6.1.0 (IBM)
  
• WebSphere Product Page (IBM)