Detections
Analytics
IBM WebSphere Application Server < 6.0.2.31 Multiple Vulnerabilities
medium Nessus Network Monitor Plugin ID 4725
Synopsis
The remote application server is affected by multiple vulnerabilities.Description
IBM WebSphere Application Server 6.0.2 before Fix Pack 31 appears to be running on the remote host. Such versions are reportedly affected by the following vulnerabilities :- By sending a specially crafted HTTP request with the 'Host' header field set to more than 256 bytes, it may be possible to crash the remote application server (PK69371).
- An unspecified security exposure vulnerability exists if the 'fileServing' feature is enabled (PK64302).
- Web services security fails to honor Certificate Revocation Lists (CRL) configured in Certificate Store Collections (PK61258).
Solution
Apply Fix Pack 31 (6.0.2.31) or higher.See Also
http://www-01.ibm.com/support/docview.wss?uid=swg1PK61258
Plugin Details
Severity: Medium
ID: 4725
Family: Web Servers
Published: 10/27/2008
Updated: 3/6/2019
Nessus ID: 34501
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.6
Temporal Score: 5.4
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:X/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:ibm:websphere_application_server
Reference Information
CVE: CVE-2008-4111, CVE-2008-4283, CVE-2008-4284, CVE-2008-4678, CVE-2008-4679, CVE-2009-0432, CVE-2009-0433, CVE-2009-0434, CVE-2009-0435, CVE-2009-0436, CVE-2009-0438