Security Bulletin: Multiple Security vulnerabilities have been identified in IBM HTTP Server shipped with IBM Security Access Manager for Enterprise Single Sign On (CVE-2015-1283, CVE-2015-4947, CVE-2015-3183)

Summary

IBM HTTP Server is shipped as a component of IBM Security Access Manager for Enterprise Single Sign On (ISAM ESSO). Information about a security vulnerability affecting IBM HTTP Server has been published in a security bulletin.

Vulnerability Details

Please consult the security bulletin Denial of service may affect IBM HTTP Server (CVE-2015-1283) for vulnerability details and information about fixes.
Please consult the security bulletin Stack Buffer overflow may affect IBM HTTP Server (CVE-2015-4947) for vulnerability details and information about fixes.
Please consult the security bulletin Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183) for vulnerability details and information about fixes.

Affected Products and Versions

Principal Product and Version(s)

| Affected Supporting Product and Version
—|—
ISAM ESSO 8.1, 8.2. 8.2.1| IBM HTTP Server 7.0
ISAM ESSO 8.2.1| IBM HTTP Server 8.5.0