Security Bulletin: Vulnerabilities identified in IBM HTTP Server shipped with IBM SOA Policy Gateway Pattern for AIX Server 2.5 and IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server (CVE-2015-3183 CVE-2015-1283)

Summary

IBM HTTP Server is shipped as a component of IBM SOA Policy Gateway Pattern for AIX Server 2.5 and IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server. Information about a security vulnerabilities affecting IBM HTTP Server have been published in security bulletins.

Vulnerability Details

Please consult the security bulletins:

Security Bulletin: HTTP Request smuggling vulnerability may affect IBM HTTP Server (CVE-2015-3183)

Security Bulletin: Denial of service may affect IBM HTTP Server (CVE-2015-1283)

for vulnerability details and information about fixes.

Affected Products and Versions

IBM SOA Policy Gateway Pattern for AIX Server 2.5
IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server 2.5
IBM SOA Policy Gateway Pattern for Red Hat Enterprise Linux Server 2.0

All affected by IBM HTTP Server V8.0

Remediation/Fixes

None

Workarounds and Mitigations

None