The installation process for the File Transfer servlet in the System Management/Repository component in IBM WebSphere Application Server (WAS) 6.1.x before 6.1.0.19 does not enable the secure version, which allows remote attackers to obtain sensitive information via unspecified vectors.

IBM WebSphere Application Server 6.1 before Fix Pack 21 appears to be running on the remote host.  Such versions are reportedly affected by multiple flaws :

  - Provided Performance Monitoring Infrastructure (PMI) is
    enabled. It may be possible for a local attacker to
    obtain sensitive information through 'Systemout.log' and
    'ffdc' files which are written by PerfServlet.
  - SSL Configuration settings attribute 'Security Level' 
    does not correctly enforce the level of encryption used
    by the application server. (PK63182) 

IBM WebSphere Application Server 7.0 before Fix Pack 1 appears to be running on the remote host.  Such versions are reportedly affected by multiple vulnerabilities.

  - A vulnerability in feature pack for web services could lead to information disclosure due to 'userNameToken' (PK67282).

  - A user locked by the underlying OS may be able to authenticate via the administrative console (PK67909).

  - Web authentication options 'Authenticate when any URI is accessed' and 'Use available authentication data when an unprotected URI is accessed' are ignored. Servlets with no security constraints are not authenticated and usernames with the '@' symbol fail to authenticate  (PK71826).

  - WS-Security in JAX-WS does not remove UsernameTokens from client cache on failed logins (PK72435).

  - SSL traffic is routed over unencrypted TCP routes (PK74777). 

IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host.  Such versions are reportedly affected by the following vulnerabilities :

  - By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash the remote application server (PK69371).
 - An unspecified security exposure vulnerability exists if the 'fileServing' feature is enabled (PK64302).
 - Web services security fails to honor Certificate Revocation Lists (CRL) configured in Certificate Store Collections (PK61258).

 IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host.  Such versions reportedly have an as-yet unspecified security exposure when the 'FileServing' feature in the Servlet Engine / Web Container component is enabled.  (PK64302).

IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host.  As such, it is reportedly affected by multiple flaws :

  - An as-yet unspecified security exposure vulnerability     exists when the 'FileServing' feature in the Servlet     Engine / Web Container component is enabled. (PK64302).

  - It may be possible for an attacker to obtain sensitive     information from the file transfer servlet that is not     secured by default. (PK59108)

 - A vulnerability in Web server plug-in could be exploited    to trigger a denial of service attack. (PK63499)

ID	Name	Product	Family	Severity
4929	IBM WebSphere Application Server 6.1 < Fix Pack 21 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
4783	IBM WebSphere Application Server 7.0 < Fix Pack 1 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
4725	IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities	Nessus Network Monitor	Web Servers	medium
4685	IBM WebSphere Application Server 6.1 < Fix Pack 19 Unspecified Vulnerability	Nessus Network Monitor	Web Servers	medium
34219	IBM WebSphere Application Server 6.1 < Fix Pack 19 Multiple Flaws	Nessus	Web Servers	high

Detections

Analytics

CVE-2009-0432

high

Tenable Plugins

medium

medium

medium

medium

high