IBM Sterling Secure Proxy缓冲区溢出漏洞

IBM Sterling Secure Proxy, an IBM application proxy for securing file transfers in an organization’s unprotected zone (DMZ), secures trusted zones with multi-factor authentication, SSL session interruption, inbound firewall vulnerability patching, protocol checking, and other controls.IBM Sterling Secure Proxy A security vulnerability exists in versions 6.0.3.0, 6.0.2.0, and 3.4.3.2 and IBM Sterling External Authentication Server. The vulnerability stems from a lack of valid validation of the submitted form content size by the Jetty-based GUI in Secure Zone. An attacker could exploit the vulnerability to launch a denial-of-service attack by submitting a specially crafted HTTP request.