Lucene search

K
cveMitreCVE-2010-0776
HistoryMay 17, 2010 - 10:30 p.m.

CVE-2010-0776

2010-05-1722:30:01
CWE-20
mitre
web.nvd.nist.gov
34
ibm
websphere
was
denial of service
vulnerability
nvd
cve-2010-0776

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

73.2%

The Web Container in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.43, 6.1 before 6.1.0.31, and 7.0 before 7.0.0.11 does not properly handle chunked transfer encoding during a call to response.sendRedirect, which allows remote attackers to cause a denial of service via a GET request.

Affected configurations

Nvd
Node
ibmwebsphere_application_serverMatch6.0
OR
ibmwebsphere_application_serverMatch6.0.0.1
OR
ibmwebsphere_application_serverMatch6.0.0.2
OR
ibmwebsphere_application_serverMatch6.0.0.3
OR
ibmwebsphere_application_serverMatch6.0.1
OR
ibmwebsphere_application_serverMatch6.0.1.1
OR
ibmwebsphere_application_serverMatch6.0.1.2
OR
ibmwebsphere_application_serverMatch6.0.1.3
OR
ibmwebsphere_application_serverMatch6.0.1.5
OR
ibmwebsphere_application_serverMatch6.0.1.7
OR
ibmwebsphere_application_serverMatch6.0.1.9
OR
ibmwebsphere_application_serverMatch6.0.1.11
OR
ibmwebsphere_application_serverMatch6.0.1.13
OR
ibmwebsphere_application_serverMatch6.0.1.15
OR
ibmwebsphere_application_serverMatch6.0.1.17
OR
ibmwebsphere_application_serverMatch6.0.2
OR
ibmwebsphere_application_serverMatch6.0.2.1
OR
ibmwebsphere_application_serverMatch6.0.2.2
OR
ibmwebsphere_application_serverMatch6.0.2.3
OR
ibmwebsphere_application_serverMatch6.0.2.4
OR
ibmwebsphere_application_serverMatch6.0.2.5
OR
ibmwebsphere_application_serverMatch6.0.2.6
OR
ibmwebsphere_application_serverMatch6.0.2.7
OR
ibmwebsphere_application_serverMatch6.0.2.8
OR
ibmwebsphere_application_serverMatch6.0.2.9
OR
ibmwebsphere_application_serverMatch6.0.2.10
OR
ibmwebsphere_application_serverMatch6.0.2.11
OR
ibmwebsphere_application_serverMatch6.0.2.12
OR
ibmwebsphere_application_serverMatch6.0.2.13
OR
ibmwebsphere_application_serverMatch6.0.2.14
OR
ibmwebsphere_application_serverMatch6.0.2.15
OR
ibmwebsphere_application_serverMatch6.0.2.16
OR
ibmwebsphere_application_serverMatch6.0.2.17
OR
ibmwebsphere_application_serverMatch6.0.2.18
OR
ibmwebsphere_application_serverMatch6.0.2.19
OR
ibmwebsphere_application_serverMatch6.0.2.20
OR
ibmwebsphere_application_serverMatch6.0.2.21
OR
ibmwebsphere_application_serverMatch6.0.2.22
OR
ibmwebsphere_application_serverMatch6.0.2.23
OR
ibmwebsphere_application_serverMatch6.0.2.24
OR
ibmwebsphere_application_serverMatch6.0.2.25
OR
ibmwebsphere_application_serverMatch6.0.2.27
OR
ibmwebsphere_application_serverMatch6.0.2.28
OR
ibmwebsphere_application_serverMatch6.0.2.29
OR
ibmwebsphere_application_serverMatch6.0.2.30
OR
ibmwebsphere_application_serverMatch6.0.2.31
OR
ibmwebsphere_application_serverMatch6.0.2.32
OR
ibmwebsphere_application_serverMatch6.0.2.33
OR
ibmwebsphere_application_serverMatch6.0.2.35
OR
ibmwebsphere_application_serverMatch6.0.2.37
OR
ibmwebsphere_application_serverMatch6.0.2.39
Node
ibmwebsphere_application_serverMatch6.1
OR
ibmwebsphere_application_serverMatch6.1.0
OR
ibmwebsphere_application_serverMatch6.1.0.0
OR
ibmwebsphere_application_serverMatch6.1.0.1
OR
ibmwebsphere_application_serverMatch6.1.0.2
OR
ibmwebsphere_application_serverMatch6.1.0.3
OR
ibmwebsphere_application_serverMatch6.1.0.5
OR
ibmwebsphere_application_serverMatch6.1.0.7
OR
ibmwebsphere_application_serverMatch6.1.0.9
OR
ibmwebsphere_application_serverMatch6.1.0.11
OR
ibmwebsphere_application_serverMatch6.1.0.13
OR
ibmwebsphere_application_serverMatch6.1.0.15
OR
ibmwebsphere_application_serverMatch6.1.0.17
OR
ibmwebsphere_application_serverMatch6.1.0.19
OR
ibmwebsphere_application_serverMatch6.1.0.21
OR
ibmwebsphere_application_serverMatch6.1.0.23
OR
ibmwebsphere_application_serverMatch6.1.0.25
OR
ibmwebsphere_application_serverMatch6.1.0.27
OR
ibmwebsphere_application_serverMatch6.1.0.29
Node
ibmwebsphere_application_serverMatch7.0
OR
ibmwebsphere_application_serverMatch7.0.0.1
OR
ibmwebsphere_application_serverMatch7.0.0.3
OR
ibmwebsphere_application_serverMatch7.0.0.5
OR
ibmwebsphere_application_serverMatch7.0.0.7
OR
ibmwebsphere_application_serverMatch7.0.0.9
VendorProductVersionCPE
ibmwebsphere_application_server6.0cpe:2.3:a:ibm:websphere_application_server:6.0:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.1cpe:2.3:a:ibm:websphere_application_server:6.0.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.2cpe:2.3:a:ibm:websphere_application_server:6.0.0.2:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.0.3cpe:2.3:a:ibm:websphere_application_server:6.0.0.3:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1cpe:2.3:a:ibm:websphere_application_server:6.0.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.1cpe:2.3:a:ibm:websphere_application_server:6.0.1.1:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.2cpe:2.3:a:ibm:websphere_application_server:6.0.1.2:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.3cpe:2.3:a:ibm:websphere_application_server:6.0.1.3:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.5cpe:2.3:a:ibm:websphere_application_server:6.0.1.5:*:*:*:*:*:*:*
ibmwebsphere_application_server6.0.1.7cpe:2.3:a:ibm:websphere_application_server:6.0.1.7:*:*:*:*:*:*:*
Rows per page:
1-10 of 761

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.4

Confidence

High

EPSS

0.004

Percentile

73.2%