PT-2010-2510 · Ibm · Ibm Websphere Application Server

Publicado 2010-05-17 · Atualizado 2017-08-17 · CVE-2010-0777

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.0 through 6.0.2.43 IBM WebSphere Application Server versions 6.1 through 6.1.0.31 IBM WebSphere Application Server versions 7.0 through 7.0.0.11

Description The issue concerns the Web Container in IBM WebSphere Application Server, which does not properly handle long filenames. This results in the server sending an incorrect file in some responses, allowing remote attackers to obtain sensitive information by reading the retrieved file.

Recommendations For IBM WebSphere Application Server versions 6.0 through 6.0.2.43, update to version 6.0.2.43 or later. For IBM WebSphere Application Server versions 6.1 through 6.1.0.31, update to version 6.1.0.31 or later. For IBM WebSphere Application Server versions 7.0 through 7.0.0.11, update to version 7.0.0.11 or later.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-0777

Produtos afetados

Ibm Websphere Application Server

Referências · 8

• https://nvd.nist.gov/vuln/detail/CVE-2010-0777 · Nota de Segurança
• http://securityfocus.com/bid/40277 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg27007951 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM06111 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/1200 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/58557 · Nota
• http://secunia.com/advisories/39838 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0777 · Nota