Detections
Analytics

IBM WebSphere Edge Caching Proxy DoS

medium Nessus Plugin ID 11162

Synopsis

The remote service is vulnerable to denial of service.

Description

We could crash the WebSphere Edge caching proxy by sending a bad request to the helpout.exe CGI.

Solution

Upgrade to Caching Proxy efix build 4.0.1.26 or later.

See Also

https://packetstormsecurity.com/advisories/misc/R7-0008.txt

Plugin Details

Severity: Medium

ID: 11162

File Name: websphere_cache_DoS.nasl

Version: 1.29

Type: remote

Family: Web Servers

Published: 11/25/2002

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.5

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.9

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:ibm:websphere_edge_server_caching_proxy

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 10/23/2002

Vulnerability Publication Date: 10/23/2002

Reference Information

CVE: CVE-2002-1169

BID: 6002