Unspecified vulnerability in Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 and 6.1 before 6.1.0.19, when the FileServing feature is enabled, has unknown impact and attack vectors.

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host.  Such versions are reportedly affected by the following vulnerabilities :

  - By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash the remote application server (PK69371).
 - An unspecified security exposure vulnerability exists if the 'fileServing' feature is enabled (PK64302).
 - Web services security fails to honor Certificate Revocation Lists (CRL) configured in Certificate Store Collections (PK61258).

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host.  As such, it is reportedly affected by multiple vulnerabilities :
 
  - By sending a specially crafted HTTP request with the     'Host' header field set to more than 256 bytes, it may     be possible to crash the remote application server.
    (PK69371)  
  - An unspecified security exposure vulnerability exists if     'fileServing' feature is enabled. (PK64302)

  - Web services security fails to honor Certificate     Revocation Lists (CRL) configured in Certificate Store     Collections. (PK61258)

  - Provided Performance Monitoring Infrastructur (PMI) is     enabled, it may be possible for an local attacker to     obtain sensitive information.

 IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host.  Such versions reportedly have an as-yet unspecified security exposure when the 'FileServing' feature in the Servlet Engine / Web Container component is enabled.  (PK64302).

IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host.  As such, it is reportedly affected by multiple flaws :

  - An as-yet unspecified security exposure vulnerability     exists when the 'FileServing' feature in the Servlet     Engine / Web Container component is enabled. (PK64302).

  - It may be possible for an attacker to obtain sensitive     information from the file transfer servlet that is not     secured by default. (PK59108)

 - A vulnerability in Web server plug-in could be exploited    to trigger a denial of service attack. (PK63499)

ID	Name	Product	Family	Severity
4725	IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
34501	IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities	Nessus	Web Servers	medium
4685	IBM WebSphere Application Server 6.1 < Fix Pack 19 Unspecified Vulnerability	Nessus Network Monitor	Web Servers	medium
34219	IBM WebSphere Application Server 6.1 < Fix Pack 19 Multiple Flaws	Nessus	Web Servers	high

Detections

Analytics

CVE-2008-4111

critical

Tenable Plugins

medium

medium

medium

high