7311 matches found
IBM Websphere Edge Server 3.69/4.0 - HTTP Header Injection
source: https://www.securityfocus.com/bid/6001/info A vulnerability has been discovered in the Caching Proxy component bundled with the IBM Websphere Edge Server. Due to insufficient sanitization of user-supplied input it is possible for an attacker to construct a malicious link which contains...
IBM Websphere Caching Proxy 3.64.0 - Denial of Service
IBM Websphere Caching Proxy 3.64.0 - Denial of Service source: https://www.securityfocus.com/bid/6002/info A vulnerability has been reported in the Caching Proxy component bundled with IBM WebSphere Edge Server. The vulnerability is due to inadequate checks when processing HTTP headers. An attack...
IBM Websphere Caching Proxy 3.6/4.0 - Denial of Service
source: https://www.securityfocus.com/bid/6002/info A vulnerability has been reported in the Caching Proxy component bundled with IBM WebSphere Edge Server. The vulnerability is due to inadequate checks when processing HTTP headers. An attacker can exploit this vulnerability by sending a malforme...
CVE-2002-1153
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host"...
IBM WebSphere DoS
There is no limit for HTTP headers...
KPMG-2002035: IBM Websphere Large Header DoS
-------------------------------------------------------------------- Title: IBM Websphere Large Header DoS BUG-ID: 2002035 Released: 19th Sep 2002 -------------------------------------------------------------------- Problem: ======== A malicious user can issue a malformed HTTP request and cause t...
CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...
CVE-2001-0962: Undefined Security Weakness
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...
IBM WebSphere Traversal Error Page XSS
The remote web server seems to be vulnerable to cross-site scripting attacks because it fails to sanitize input supplied as a filename when displaying an error page. The vulnerability would allow an attacker to make the server present the user with the attacker's JavaScript/HTML code. Since the...
CVE-2001-1189
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...
CVE-2001-1189: Undefined Security Weakness
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...
IBM WebSphere on UNIX security alert !
====================================================================== IBM Websphere reveals system root password. Author : Heikki Tunkelo [email protected] Date : 13.12.2001 ====================================================================== === Brief description === It is possible...
Доступ к паролю в IBM WebSphere (unauthorized access)
JSP-приложения запускаются с привилегиями root что дает доступ к файлу, содержащиму пароль администрирования...
CVE-2001-1189
IBM Websphere Application Server 3.5.3 and earlier stores a password in cleartext in the sas.server.props file, which allows local users to obtain the passwords via a JSP script...
CVE-2001-0824
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into 1 a request for a .JSP file, or 2 a request to the webapp/examples/ directory, which inserts the Javascript into an error page...
CVE-2001-0824
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into 1 a request for a .JSP file, or 2 a request to the webapp/examples/ directory, which inserts the Javascript into an error page...
CVE-2001-0824: Undefined Security Weakness
Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into 1 a request for a .JSP file, or 2 a request to the webapp/examples/ directory, which inserts the Javascript into an error page...
CVE-2001-0962
IBM WebSphere Application Server 3.02 through 3.53 uses predictable session IDs for cookies, which allows remote attackers to gain privileges of WebSphere users via brute force guessing...
IBM WebSphere vulnerable to Cross-Site Scripting via passing of user input directly to default error page
Overview Web Servers that use the IBM WebSphere Java Servlet Container 3.5 and earlier are vulnerable to a cross-site scripting vulnerability. A web site may inadvertently include malicious HTML tags or scriptJavaScript, VBScript, Java, etc. in a dynamically generated page based on unvalidated...