PT-2007-4541 · Ibm · Ibm Websphere Application Server

Published 2007-06-19 · Updated 2017-07-29 · CVE-2007-3262

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM WebSphere Application Server versions 6.1.0.7 and earlier

Description The issue is related to an unspecified vulnerability in the Default Messaging Component, which allows remote attackers to cause a denial of service. This denial of service is related to a thread hang and possibly to a TCP issue or to MPAlarmThread, resulting in a memory leak.

Recommendations For versions 6.1.0.7 and earlier, update to a version later than 6.1.0.7 to resolve the issue.

Fix

Related Identifiers

CVE-2007-3262

Affected Products

Ibm Websphere Application Server

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2007-3262 · Security Note
• http://secunia.com/advisories/25704 · Vendor Advisory
• http://www-1.ibm.com/support/docview.wss?uid=swg27007951 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34903 · Note
• http://securityfocus.com/bid/24505 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3262 · Note
• http://osvdb.org/41614 · Note
• http://vupen.com/english/advisories/2007/2234 · Note