Detections
Analytics
IBM WebSphere Application Server 6.1 < 6.1.0.7 Multiple Vulnerabilities
critical Nessus Plugin ID 45420
Language:
Synopsis
The remote application server is affected by multiple vulnerabilities.Description
IBM WebSphere Application Server 6.1 before Fix Pack 7 appears to be running on the remote host. As such, it is reportedly affected by the following vulnerabilities :- An unspecified denial of service vulnerability in the Java Message Service (JMS).
- An unspecified vulnerability in the Servlet Engine/ Web Container. (PK36447)
- An unspecified vulnerability in the Default Messaging component could lead to a denial of service.
- An unspecified vulnerability in the Default Messaging component which has unknown impact and attack vectors.
Solution
Apply Fix Pack 7 (6.1.0.7) or later.See Also
http://www-1.ibm.com/support/docview.wss?uid=swg27007951#6107
Plugin Details
Severity: Critical
ID: 45420
File Name: websphere_6_1_0_7.nasl
Version: 1.9
Type: remote
Family: Web Servers
Published: 4/5/2010
Updated: 8/6/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:ibm:websphere_application_server
Required KB Items: www/WebSphere
Exploit Ease: No known exploits are available
Patch Publication Date: 4/5/2007
Vulnerability Publication Date: 4/27/2007
Reference Information
CVE: CVE-2007-1944, CVE-2007-1945, CVE-2007-3262, CVE-2007-3263
BID: 23459