IBM WebSphere Application Server Prior to 6.0.2.13 Multiple Vulnerabilities

Bugtraq ID:	19527
Class:	Unknown
CVE:
Remote:	Yes
Local:	Yes
Published:	Aug 10 2006 12:00AM
Updated:	Aug 15 2006 10:50PM
Credit:	Reported by the vendor.
Vulnerable:	IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2
Not Vulnerable:	IBM Websphere Application Server 6.0.2 .13

IBM WebSphere Application Server Prior to 6.0.2.13 Multiple Vulnerabilities

IBM WebSphere Application Server is prone to multiple unspecified vulnerabilities, including:

- multiple information-disclosure issues
- multiple security exposures of unknown impact
- a potential authority issue.

IBM WebSphere Application Server versions in the 6.0.2 series (prior to 6.0.2.13) are vulnerable to these issues.

IBM WebSphere Application Server Prior to 6.0.2.13 Multiple Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Some of these issues likely do not require specific exploit code.

IBM WebSphere Application Server Prior to 6.0.2.13 Multiple Vulnerabilities

Solution:
IBM has released WebSphere Application Server 6.0.2 Fix Pack 13 to address these issues. Please see the references for more information.

IBM WebSphere Application Server Prior to 6.0.2.13 Multiple Vulnerabilities

References:

• 6.0.2.13: WebSphere Application Server V6.0.2 Fix Pack 13 for AIX platforms (IBM)
  
• Fix list for WebSphere Application Server Version 6.0.2 (IBM)
  
• WebSphere Product Page (IBM)