Secunia

A vulnerability has been identified in various products, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the XML parser when parsing the DTD (Document Type Definition) part of XML documents.

This can be exploited by sending a specially crafted SOAP request, which causes a vulnerable SOAP server to consume all CPU resources for a longer period of time as well as large amounts of memory.

The vulnerability affects the following products:
* IBM WebSphere 5.0.0
* Microsoft ASP.NET Web Services (.NET framework 1.0, .NET framework 1.1)

Solution
-- IBM WebSphere 5.0.0 --
Further details available in Customer Area

Provided and/or discovered by
Amit Klein, Sanctum inc.

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?rs=180&context=SSEQTP&q=PQ70921&uid=swg24005582

Microsoft:
http://support.microsoft.com/default.aspx?kbid=826231

Deep Links
Links available in Customer Area