IBM WebSphere Application Server for z/OS JAX-RPC远程安全漏洞

BUGTRAQ ID: 52250 CVE ID: CVE-2012-0199 IBM WebSphere Application Server WAS是由IBM遵照开放标准，例如Java EE, XML 还有Web Services，开发并发行的一种应用服务器。与其兼容的Web服务器包括：Apache HTTP Server，Netscape Enterprise Server，Microsoft Internet Information Services IIS以及IBM HTTP Server。 IBM WebSphere Application Server for...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

This host is running IBM HTTP Server and is prone to multiple cross site scripting vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmhttpservermultxssvuln.nasl 5785 2017-03-30 09:19:35Z cfi $ IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities Authors: Antu Sanadi Copyright: Copyrig...

IBM HTTP Server Multiple Cross Site Scripting Vulnerabilities

IBM HTTP Server is prone to multiple cross site scripting vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

CVE-2011-1360

Multiple cross-site scripting XSS vulnerabilities in IBM HTTP Server 2.0.47 and earlier, as used in WebSphere Application Server and other products, allow remote attackers to inject arbitrary web script or HTML via vectors involving unspecified documentation files in 1 manual/ibm/ and 2...

CVE-2011-1360

CVE-2011-1360 covers multiple cross-site scripting (XSS) vulnerabilities in IBM HTTP Server 2.0.47 and earlier. The issue arises from untrusted input in documentation-related paths (manual/ibm/ and htdocs/*/manual/ibm/), enabling an attacker to inject arbitrary script/HTML. Products using IBM HTT...

httpd: Expect header XSS

httpprotocol.c in 1 IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and 2 Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site...

IBM HTTP Server mod_ibm_ssl模块远程拒绝服务漏洞

CVE ID: CVE-2010-2327 IBM HTTP Server是基于Apache HTTP Server的WEB服务器。 IBM HTTP Server所使用的modibmssl模块没有正确地处理通过SSL所上传的超大HTTP请求体，如果上传大于2G的话就会导致服务器失效。 IBM HTTP Server 7.0 IBM HTTP Server 6.1 IBM HTTP Server 6.0 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-2327

modibmssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server WAS on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service daemon...

Design/Logic Flaw

modibmssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server WAS on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service daemon...

CVE-2010-2327

modibmssl in IBM HTTP Server 6.0 before 6.0.2.43, 6.1 before 6.1.0.33, and 7.0 before 7.0.0.11, as used in IBM WebSphere Application Server WAS on z/OS, does not properly handle a large HTTP request body in uploading over SSL, which might allow remote attackers to cause a denial of service daemon...

CVE-2010-2327

CVE-2010-2327 affects IBM HTTP Server’s mod_ibm_ssl (used with IBM WebSphere Application Server on z/OS). The issue is improper handling of very large HTTP request bodies during SSL uploads, which can cause a denial of service (daemon failure). Affected versions are IBM HTTP Server 6.0 before 6.0...

Apache 'mod_proxy_http' Interim Response Denial of Service Vulnerability

CVE: CVE-2008-2364 The Apache 'modproxyhttp' module is prone to a denial-of-service vulnerability that affects the processing of interim responses. Attackers may exploit this issue to cause denial-of-service conditions. Reportedly, the issue affects Apache 2.2.8 and 2.0.63; other versions may als...

ibm-http 1.3.19 代码泄漏漏洞

No description provided by source...

IBM HTTP Server mod_proxy_ftp 跨站脚本漏洞

BUGTRAQ ID: CVE ID：CVE-2008-2939 CNCVE ID：CNCVE-20082939 IBM HTTP Server是一款HTTP服务程序。 IBM HTTP Server "modproxyftp"存在输入验证问题，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细解决方案提供。 IBM HTTP Server 6.0.x 厂商解决方案 可参考如下安全公告获得补丁信息： http://www-01.ibm.com/support/docview.wss?uid=swg27007033...

CVE-2009-0436

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

Code injection

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

CVE-2009-0436

The 1 modibmssl and 2 modcgid modules in IBM HTTP Server 6.0.x before 6.0.2.31 and 6.1.x before 6.1.0.19, as used in WebSphere Application Server WAS, set incorrect permissions for AFUNIX sockets, which has unknown impact and local attack vectors...

IBM HTTP Server mod_proxy Interim Responses DoS Vulnerability

This host is running IBM HTTP Server, which is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: secpodibmhttpservermodproxydos900222.nasl 5785 2017-03-30 09:19:35Z cfi $ Description: IBM HTTP Server modproxy Interim Responses DoS Vulnerability Authors: Veerendra GG...