PT-2001-1608 · Ibm · Ibm Websphere/Netcommerce3
Publicado
2001-05-24
·
Atualizado
2008-09-05
·
CVE-2001-0390
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
IBM Websphere/NetCommerce3 version 3.1.2
Description
The issue allows remote attackers to cause a denial of service by directly calling the macro
macro.d2w with a long string of %0a characters.Recommendations
For IBM Websphere/NetCommerce3 version 3.1.2, consider restricting access to the
macro.d2w macro to prevent denial of service attacks until a patch is available.Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Ibm Websphere/Netcommerce3