Security Bulletin: IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting attacks [CVE-2023-38709, CVE-2024-24795].

Summary

IBM HTTP Server (powered by Apache) for IBM i is vulnerable to HTTP response splitting attacks due to improper input validation and flaws in multiple modules as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerabilities as described in the remediation/fixes section.

Vulnerability Details

CVEID:CVE-2023-38709
**DESCRIPTION:**Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by improper input validation in the core. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/286938 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)

CVEID:CVE-2024-24795
**DESCRIPTION:**Apache HTTP Server is vulnerable to HTTP response splitting attacks, caused by a flaw in multiple modules. A remote attacker could exploit this vulnerability to inject arbitrary HTTP headers and cause the server to return a split response, once the URL is clicked. This would allow the attacker to perform further attacks, such as Web cache poisoning or cross-site scripting, and possibly obtain sensitive information.
CVSS Base score: 6.5
CVSS Temporal Score: See: https://exchange.xforce.ibmcloud.com/vulnerabilities/286940 for the current score.
CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)

Affected Products and Versions

Remediation/Fixes

The issue can be fixed by applying a PTF to IBM i. IBM i releases 7.5, 7.4, 7.3, and 7.2 will be fixed.

The IBM i PTF numbers contain the fixes for the vulnerabilities.

IBM i Release| 5770-DG1
PTF Number| PTF Download Link
—|—|—
7.5| SJ01350
SJ01401| <https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01350&gt;
<https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01401&gt;
7.4| SJ01349
SJ01400| <https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01349&gt;
<https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01400&gt;

7.3| SJ01348
SJ01398| <https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01348&gt;
<https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01398&gt;
7.2| SJ01347
SJ01395| <https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01347&gt;
<https://www.ibm.com/mysupport/s/fix-information?legacy=SJ01395&gt;

<https://www.ibm.com/support/fixcentral&gt;

_Important note: _IBM recommends that all users running unsupported versions of affected products upgrade to supported and fixed version of affected products.

Workarounds and Mitigations

None