Detections
Analytics
IBM WebSphere Application Server 6.1 < Fix Pack 19 Multiple Flaws
high Nessus Plugin ID 34219
Language:
Synopsis
The remote application server is affected by multiple vulnerabilities.Description
IBM WebSphere Application Server 6.1 before Fix Pack 19 appears to be running on the remote host. As such, it is reportedly affected by multiple flaws :- An as-yet unspecified security exposure vulnerability exists when the 'FileServing' feature in the Servlet Engine / Web Container component is enabled. (PK64302).
- It may be possible for an attacker to obtain sensitive information from the file transfer servlet that is not secured by default. (PK59108)
- A vulnerability in Web server plug-in could be exploited to trigger a denial of service attack. (PK63499)
Solution
If using WebSphere Application Server, apply Fix Pack 19 (6.1.0.19) or later.Otherwise, if using embedded WebSphere Application Server packaged with Tivoli Directory Server, apply the latest recommended eWAS fix pack.
See Also
http://www-01.ibm.com/support/docview.wss?uid=swg21404665
http://www-01.ibm.com/support/docview.wss?uid=swg27009778
http://www-01.ibm.com/support/docview.wss?uid=swg27007951#61019
Plugin Details
Severity: High
ID: 34219
File Name: websphere_6_1_0_19.nasl
Version: 1.18
Type: remote
Family: Web Servers
Published: 9/16/2008
Updated: 8/6/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:ibm:websphere_application_server
Required KB Items: www/WebSphere
Exploit Ease: No known exploits are available
Patch Publication Date: 9/15/2008