PT-2010-3913 · Ibm · Ibm Http Server

Publicado 2010-06-18 · Atualizado 2010-06-21 · CVE-2010-2327

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions IBM HTTP Server versions 6.0 through 6.0.2.43 IBM HTTP Server versions 6.1 through 6.1.0.33 IBM HTTP Server versions 7.0 through 7.0.0.11

Description The issue is related to the handling of large HTTP request bodies in uploading over SSL. This might allow remote attackers to cause a denial of service, potentially leading to the failure of the daemon, via an upload.

Recommendations For IBM HTTP Server versions 6.0 through 6.0.2.43, update to version 6.0.2.43 or later. For IBM HTTP Server versions 6.1 through 6.1.0.33, update to version 6.1.0.33 or later. For IBM HTTP Server versions 7.0 through 7.0.0.11, update to version 7.0.0.11 or later.

Correção

DoS

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2010-2327

Produtos afetados

Ibm Http Server

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg1PM15830 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg1PM10270 · Aviso do Fabricante
• http://vupen.com/english/advisories/2010/1411 · Aviso do Fabricante
• http://secunia.com/advisories/40096 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2327 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2327 · Nota de Segurança
• http://osvdb.org/65439 · Nota