CVE-2012-3305

CVE-2012-3305 in IBM WebSphere Application Server is a directory traversal vulnerability present in WAS versions 6.1 (up to 6.1.0.47), 7.0 (up to 7.0.0.25), 8.0 (up to 8.0.0.5), and 8.5 (up to 8.5.0.1). An attacker could remotely overwrite files outside the deployment directory via a crafted appl...

Stack overflow

Stack-based buffer overflow in slssvc.exe before 58.x in Invensys Wonderware SuiteLink in the Invensys System Platform software suite, as used in InTouch/Wonderware Application Server IT before 10.5 and WAS before 3.5, DASABCIP before 4.1 SP2, DASSiDirect before 3.0, DAServer Runtime Components...

CVE-2012-2162

The CVE-2012-2162 vulnerability affects IBM WebSphere Application Server

CVE-2012-0193

CVE-2012-0193 affects IBM WebSphere Application Server (WAS) and is a DoS risk caused by hashing collisions in form parameters. Affected WAS versions include 6.0 up to 6.0.2.43, 6.1 before 6.1.0.43, 7.0 before 7.0.0.23, and 8.0 before 8.0.0.3. The underlying issue is the hash table collision expo...

CVE-2011-1376

CVE-2011-1376 affects IBM WebSphere Application Server on IBM i. The issue arises from iscdeploy creating insecure permissions in systemapps/isclite.ear/ and bin/client_ffdc/, allowing a local user to read or modify files via normal filesystem operations. Affected versions are WAS 6.1 prior to 6....

CVE-2011-5065

CVE-2011-5065 describes a cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before Fix Pack 41 (6.1.0.41) that allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging. The vulnerability is tied to WAS Web Messaging c...

CVE-2011-5066

CVE-2011-5066 affects IBM WebSphere Application Server 6.1 (Default Messaging Component). The SibRaRecoverableSiXaResource class does not properly handle a Service Integration Bus (SIB) dump operation in the FFDC introspection code, allowing local users to read the FFDC log file and obtain sensit...

Fedora Update for perl-Mojolicious FEDORA-2011-5504

Check for the Version of perl-Mojolicious OpenVAS Vulnerability Test Fedora Update for perl-Mojolicious FEDORA-2011-5504 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CVE-2011-1209

CVE-2011-1209 affects IBM WebSphere Application Server: WAS 6.1 before 6.1.0.39 and WAS 7.0 before 7.0.0.17 use a weak WS-Security XML encryption algorithm, enabling a remote decryption attack to obtain plaintext data from JAX-RPC/JAX-WS requests. Exploitation details/vectors are not specified in...

CVE-2011-1321

The CVE concerns IBM WebSphere Application Server (WAS) where the AuthCache purge in the Security component fails to purge a user from the PlatformCredential cache. Affected products/versions are WAS 6.1.0.x before 6.1.0.37 and 7.x before 7.0.0.15. Root cause: the purge does not remove the user f...

CVE-2011-1307

CVE-2011-1307 : IBM WebSphere Application Server (WAS) prior to 7.0.0.15 uses 777 permissions for a temporary log directory in its installer, enabling local users to access log files via standard filesystem operations. This is described as a separate issue from CVE-2009-1173; affected product/ver...

CVE-2011-1320

CVE-2011-1320 concerns IBM WebSphere Application Server (WAS) with the TIP/eWAS framework where, on logout, AuthCache entries are not properly deleted for WAS 6.1.0.x (before 6.1.0.35) and WAS 7.x (before 7.0.0.15). This may allow a remote attacker to access the server by exploiting an unattended...

CVE-2011-1316

CVE-2011-1316 affects IBM WebSphere Application Server (WAS) SIP Proxy in the HTTP Transport, where sending a flood of UDP messages can exhaust worker threads and cause UDP messaging outage, leading to a DoS condition. Vulnerable: WAS versions before 7.0.0.15. Red Hat and OpenVAS entries corrobor...

CVE-2011-1311

The CVE-2011-1311 issue affects IBM WebSphere Application Server (WAS) prior to 7.0.0.15. When a J2EE 1.4 application is used, the Security component determines security role mappings using ibm-application-bnd.xml instead of ibm-application-bnd.xmi. This misconfiguration could allow remote authen...

CVE-2010-3186

IBM WebSphere Application Server 7.x before 7.0.0.13 and WebSphere Application Server Feature Pack for Web Services 6.1.0.9 through 6.1.0.32 are affected when using a JAX-WS application; the WS-Security policy IncludeTimestamp setting is not handled correctly, with unspecified impact and remote a...

Design/Logic Flaw

Apache Axis2 before 1.5.2, as used in IBM WebSphere Application Server WAS 7.0 through 7.0.0.12, IBM Feature Pack for Web Services 6.1.0.9 through 6.1.0.32, IBM Feature Pack for Web 2.0 1.0.1.0, Apache Synapse, Apache ODE, Apache Tuscany, Apache Geronimo, and other products, does not properly...

CVE-2010-2328

CVE-2010-2328 affects IBM WebSphere Application Server (WAS) 7.0 prior to 7.0.0.11. The HTTP Channel can be triggered by a large amount of chunked data using gzip compression, causing a NullPointerException and a denial of service. The vulnerability is documented across multiple sources (NVD entr...

CVE-2010-2323

CVE-2010-2323 affects IBM WebSphere Application Server (WAS) 7.0 on z/OS prior to 7.0.0.11. The issue could allow an attacker to obtain sensitive information by reading the default_create.log file written during profile creation by the BBOWWPFx job and the zPMT. The underlying cause is improper h...

CVE-2010-0776

CVE-2010-0776 affects IBM WebSphere Application Server Web Container: under WAS 6.0 (before 6.0.2.43), 6.1 (before 6.1.0.31), and 7.0 (before 7.0.0.11), the Web Container mishandles chunked transfer encoding when response.sendRedirect is used, allowing remote attackers to cause a denial of servic...

CVE-2010-1651

IBM WebSphere Application Server (WAS) is affected by CVE-2010-1651: when Basic authentication and SIP tracing are enabled, SIP trace logs contain the complete inbound/outbound SIP messages, allowing a local attacker to read sensitive information. Affected versions are WAS 6.1.x prior to 6.1.0.31...