Application Server Security Vulnerabilities

CVE-2000-0848

Buffer overflow in IBM WebSphere web application server (WAS) allows remote attackers to execute arbitrary commands via a long Host: request...

CVE-2000-0497

IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper...

CVE-2000-0652

IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file"...

CVE-2000-0169

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL that includes...

CVE-1999-0852

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in...