Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.

The version of IBM HTTP Server running on the remote host is affected by a vulnerability. Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Oracle HTTP Server installed on the remote host is affected by multiple vulnerabilities :

  - (CVE-2003-1418)

  - A denial of service vulnerability exists in libxml2,     related to the xmlParserHandlePEReference() function in     file parser.c, due to loading external parameter     entities without regard to entity substitution or     validation being enabled, as in the case of entity     substitution in the doctype prolog. An unauthenticated,     remote attacker can exploit this, via specially crafted     XML content, to exhaust the system CPU, memory, or file     descriptor resources. (CVE-2014-0191)

  - An unspecified vulnerability exists in the Web Listener     component that allows an unauthenticated, remote     attacker to impact availability. (CVE-2015-1829)

  -  (CVE-2015-2808)

  - An unspecified vulnerability exists in the OSSL Module     that allows an unauthenticated, remote attacker to     impact confidentiality. (CVE-2015-4812)

  - An unspecified vulnerability exists in the Web Listener     component that allows an authenticated, remote attacker     to impact confidentiality. (CVE-2015-4914)

  - (CVE-2016-2183)

The IBM HTTP Server running on the remote host is version 6.0 prior to or equal to 6.0.2.43, 6.1 prior to or equal to 6.1.0.47, 7.0 prior to 7.0.0.39, 8.0 prior to 8.0.0.11, or 8.5 prior to 8.5.5.7. It is, therefore, affected by a flaw in the Apache Portable Runtime (APR) that is triggered when an APR application is using APR named pipe support on Windows. A local attacker can exploit this to conduct a pipe squatting attack from a local process.

According to its banner, the version of IBM HTTP Server running on the remote host is potentially affected by a denial of service vulnerability due to an error related to the included Apache Portable Runtime (APR) and named pipe handling. A local attacker, using a 'named pipe squatting attack' from a local process, can exploit this to cause a denial of service. This issue only affects IBM HTTP Server on Windows.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Also note that Nessus has not attempted to determine if the 'PI39833' interim fix or a later patch has been applied. If a patch has already been applied, consider this a false positive.

ID	Name	Product	Family	Severity
144090	IBM HTTP Server 8.5.0.0 <= 8.5.5.5 / 8.0.0.0 <= 8.0.0.10 / 7.0.0.0 <= 7.0.0.37 / 6.1.0.0 <= 6.1.0.47 / 6.0.0.0 <= 6.0.2.43 (528295)	Nessus	Web Servers	medium
86569	Oracle Fusion Middleware Oracle HTTP Server Multiple Vulnerabilities (October 2015 CPU)	Nessus	Web Servers	high
86019	IBM HTTP Server 6.0 <= 6.0.2.43 (FP43) / 6.1 <= 6.1.0.47 (FP47) / 7.0 < 7.0.0.39 (FP39) / 8.0 < 8.0.0.11 (FP11) / 8.5 < 8.5.5.7 (FP7) Named Pipe DoS	Nessus	Web Servers	medium
84290	IBM HTTP Server on Windows Apache Portable Runtime (APR) Named Pipe DoS	Nessus	Web Servers	medium

Detections

Analytics

CVE-2015-1829

high

Tenable Plugins

medium

high

medium

medium