Lucene search

MitreCVE-2002-1153

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-1153

2004-09-0104:00:00

mitre

web.nvd.nist.gov

ibm

websphere

4.0.3

remote code execution

denial of service

http request

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

High

EPSS

0.016

Percentile

87.8%

JSON

IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as “Host”.

Affected configurations

Nvd

Node

ibmwebsphere_application_serverMatch4.0.3

VendorProductVersionCPE
ibmwebsphere_application_server4.0.3cpe:2.3:a:ibm:websphere_application_server:4.0.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ibm	websphere_application_server	4.0.3	cpe:2.3:a:ibm:websphere_application_server:4.0.3:::::::*

References

ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt

marc.info/?l=bugtraq&m=103244572803950&w=2

www.iss.net/security_center/static/10140.php

www.osvdb.org/2092

www.securityfocus.com/bid/5749

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

High

EPSS

0.016

Percentile

87.8%

JSON

Related for CVE-2002-1153