CVE

Id
37868  
CVE No.
CVE-2009-0433  
Status
Candidate  
Description
Unspecified vulnerability in IBM WebSphere Application Server (WAS) 5.1.x before 5.1.1.19, 6.0.x before 6.0.2.29, and 6.1.x before 6.1.0.19, when Web Server plug-in content buffering is enabled, allows attackers to cause a denial of service (daemon crash) via unknown vectors, related to a mishandling of client read failures in which clients receive many 500 HTTP error responses and backend servers are incorrectly labeled as down.  
Phase
Assigned (20090205)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
411409 37868 CVE-2009-0433 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27006879  View
411410 37868 CVE-2009-0433 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27007033  View
411411 37868 CVE-2009-0433 CONFIRM:http://www-01.ibm.com/support/docview.wss?uid=swg27007951  View
411412 37868 CVE-2009-0433 AIXAPAR:PK63499  View
411413 37868 CVE-2009-0433 URL:http://www-1.ibm.com/support/docview.wss?uid=swg1PK63499  View
411414 37868 CVE-2009-0433 AIXAPAR:PK67161  View
411415 37868 CVE-2009-0433 URL:http://www-01.ibm.com/support/docview.wss?uid=swg1PK67161  View
411416 37868 CVE-2009-0433 BID:33700  View
411417 37868 CVE-2009-0433 URL:http://www.securityfocus.com/bid/33700  View
411418 37868 CVE-2009-0433 XF:websphere-server-plugin-dos(48523)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40355 JVNDB-2009-001361 IBM WebSphere Application Server (WAS) 用 Installation Factory における情報漏洩の脆弱性 IBM WebSphere Application Server (WAS) 用 Installation Factory には、 Windows 上でのインストールプロセスにおいて機密情報をログに出力することに起因して、WAS を Windows サービスとして登録する際に、機密情報を取得される脆弱性が存在します。 CVE-2009-0437 37868 1.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001361.html  View