IBM WebSphere Application Server Multiple Vulnerabilities
BID:33700
Info
IBM WebSphere Application Server Multiple Vulnerabilities
| Bugtraq ID: | 33700 |
| Class: | Unknown |
| CVE: |
CVE-2009-0432 CVE-2009-0433 CVE-2009-0434 CVE-2009-0435 CVE-2009-0436 CVE-2009-0438 CVE-2008-4284 CVE-2008-4283 |
| Remote: | Yes |
| Local: | Yes |
| Published: | Feb 09 2009 12:00AM |
| Updated: | Feb 10 2009 12:08AM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .33 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .29 IBM Websphere Application Server 6.0.2 .25 IBM Websphere Application Server 6.0.2 .24 IBM Websphere Application Server 6.0.2 .23 IBM Websphere Application Server 6.0.2 .22 IBM Websphere Application Server 6.0.2 .21 IBM Websphere Application Server 6.0.2 .19 IBM Websphere Application Server 6.0.2 .17 IBM Websphere Application Server 6.0.2 .15 IBM Websphere Application Server 6.0.2 .13 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0.1 IBM Websphere Application Server 6.0 IBM Websphere Application Server 5.1.1 .9 IBM Websphere Application Server 5.1.1 .8 IBM Websphere Application Server 5.1.1 .7 IBM Websphere Application Server 5.1.1 .6 IBM Websphere Application Server 5.1.1 .5 IBM Websphere Application Server 5.1.1 .4 IBM Websphere Application Server 5.1.1 .3 IBM Websphere Application Server 5.1.1 .2 IBM Websphere Application Server 5.1.1 .18 IBM Websphere Application Server 5.1.1 .17 IBM Websphere Application Server 5.1.1 .16 IBM Websphere Application Server 5.1.1 .15 IBM Websphere Application Server 5.1.1 .14 IBM Websphere Application Server 5.1.1 .13 IBM Websphere Application Server 5.1.1 .12 IBM Websphere Application Server 5.1.1 .11 IBM Websphere Application Server 5.1.1 .10 IBM Websphere Application Server 5.1.1 .1 IBM Websphere Application Server 5.1.1 IBM Websphere Application Server 5.1.1 IBM Websphere Application Server 5.1 .0.5 IBM Websphere Application Server 5.1 .0.4 IBM Websphere Application Server 5.1 .0.3 IBM Websphere Application Server 5.1 .0.2 IBM Websphere Application Server 5.1 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.0.2.19 IBM Websphere Application Server 6.0.2 Fix Pack 17 |
| Not Vulnerable: |
IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.0.2 .31 IBM Websphere Application Server 5.1.1 .19 IBM Websphere Application Server 7.0.0.1 |
Discussion
IBM WebSphere Application Server Multiple Vulnerabilities
IBM WebSphere Application Server (WAS) is prone to multiple vulnerabilities.
Attackers can exploit these issues to cause denial-of-service conditions, control how a site is rendered, obtain potentially sensitive information, or gain elevated privileges.
These issues affects WebSphere Application Server 5.1.0, 5.1.1, 6.0.2, 6.1, and 7.0.
IBM WebSphere Application Server (WAS) is prone to multiple vulnerabilities.
Attackers can exploit these issues to cause denial-of-service conditions, control how a site is rendered, obtain potentially sensitive information, or gain elevated privileges.
These issues affects WebSphere Application Server 5.1.0, 5.1.1, 6.0.2, 6.1, and 7.0.
Exploit / POC
IBM WebSphere Application Server Multiple Vulnerabilities
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM WebSphere Application Server Multiple Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
IBM WebSphere Application Server Multiple Vulnerabilities
References:
References:
- IBM Websphere Homepage (IBM)
- IBM WebSphere Application Server File Transfer servlet information disclosure (IBM)
- IBM WebSphere Application Server HTTP AF_UNIX sockets incorrect permissions (IBM)
- IBM WebSphere Application Server JSP Windows information disclosure (IBM)
- IBM WebSphere Application Server libibmaio.so library denial of service (IBM)
- IBM WebSphere Application Server PMI log file information disclosure (IBM)
- IBM WebSphere Application Server Security component logoutExitPage disclosure (IBM)
- IBM WebSphere Application Server Web Server Plugin denial of service (IBM)
- IBM WebSphere Application Server WebContainer HTTP response splitting (IBM)