Vulnerability Details CVE-2002-1153
IBM Websphere 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP request with long HTTP headers, such as "Host".
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.0%
CVSS Severity
CVSS v2 Score 5.0
References
- ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt
- http://marc.info/?l=bugtraq&m=103244572803950&w=2
- http://www.iss.net/security_center/static/10140.php
- http://www.osvdb.org/2092
- http://www.securityfocus.com/bid/5749
- ftp://ftp.software.ibm.com/software/websphere/appserv/support/fixes/pq62144/readme.txt
- http://marc.info/?l=bugtraq&m=103244572803950&w=2
- http://www.iss.net/security_center/static/10140.php
- http://www.osvdb.org/2092
- http://www.securityfocus.com/bid/5749
Products affected by CVE-2002-1153
-
cpe:2.3:a:ibm:websphere_application_server:4.0.3