PT-2004-1771 · Ibm · Websphere Edge Server

Published 2004-07-13 · Updated 2017-07-11 · CVE-2004-0684

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions WebSphere Edge Server version 5.02

Description The issue allows remote attackers to cause a denial of service via an HTTP GET request without any parameters when the JunctionRewrite directive is enabled in the WebSphere Edge Component Caching Proxy.

Recommendations For WebSphere Edge Server version 5.02, consider disabling the JunctionRewrite directive as a temporary workaround to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-0684

Affected Products

Websphere Edge Server

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2004-0684 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16607 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0684 · Note
• http://marc.info/?l=bugtraq&m=108938997528245&w=2 · Note
• http://cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf · Note