CVE

Id
34795  
CVE No.
CVE-2008-4678  
Status
Candidate  
Description
The HTTP_Request_Parser method in the HTTP Transport component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.31 allows remote attackers to cause a denial of service (controller 0C4 abend and application hang) via a long HTTP Host header, related to "storage overlay" on the stack and a "parse failure."  
Phase
Assigned (20081022)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
380913 34795 CVE-2008-4678 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27006876  View
380914 34795 CVE-2008-4678 AIXAPAR:PK69371  View
380915 34795 CVE-2008-4678 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK69371  View
380916 34795 CVE-2008-4678 BID:31839  View
380917 34795 CVE-2008-4678 URL:http://www.securityfocus.com/bid/31839  View
380918 34795 CVE-2008-4678 VUPEN:ADV-2008-2871  View
380919 34795 CVE-2008-4678 URL:http://www.vupen.com/english/advisories/2008/2871  View
380920 34795 CVE-2008-4678 SECUNIA:32296  View
380921 34795 CVE-2008-4678 URL:http://secunia.com/advisories/32296  View
380922 34795 CVE-2008-4678 XF:websphere-hostheader-dos(45993)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51039 JVNDB-2008-006349 Wireshark の wtap.c におけるサービス運用妨害 (DoS) の脆弱性 Wireshark の wtap.c には、サービス運用妨害 (アプリケーションの中止) 状態となる脆弱性が存在します。 CVE-2008-4682 34795 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-006349.html  View