PT-2006-3393 · Ibm · Ibm Websphere Application Server

Snob · Published 2006-05-17 · Updated 2011-03-08 · CVE-2006-2432

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 5.0.2 and earlier, 5.1.1 and earlier

Description The issue allows unauthorized EJB access on Solaris systems through a crafted LTPA token.

Recommendations For versions 5.0.2 and earlier, apply the latest cumulative fix to resolve the issue. For versions 5.1.1 and earlier, apply the latest cumulative fix to resolve the issue.

Fix

Related Identifiers

CVE-2006-2432

Affected Products

Ibm Websphere Application Server

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2006-2432 · Security Note
• http://secunia.com/advisories/20032 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006881 · Patch
• http://archives.neohapsis.com/archives/bugtraq/2006-05/0175.html · Patch
• http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg27006879 · Patch
• http://securityreason.com/securityalert/910 · Note
• http://vupen.com/english/advisories/2006/1736 · Note
• http://www-1.ibm.com/support/search.wss?rs=0&q=PK19195&apar=only · Patch, Vendor Advisory
• http://vupen.com/english/advisories/2006/2552 · Note
• http://osvdb.org/25375 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2432 · Note