IBM WebSphere Application Server serveServletsByClassnameEnabled sårbarhed - Advisories

IBM WebSphere Application Server serveServletsByClassnameEnabled sårbarhed

Secunia Advisory:	SA28576
Udsendt:	2008-01-21
Sidste Opdt.:	2008-02-04

Kritisk:	Ikke kritisk
Betydning:	Afsløring af system-information
Hvor:	Fra Internet
Løsning Status:	Producent Patch

Software:	IBM WebSphere Application Server 6.0.x IBM WebSphere Application Server 6.1.x

CVE reference:	CVE-2008-0389 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Beskrivelse: Der er rapporteret en sårbarhed med ukendt betydning i IBM WebSphere Application Server. Sårbarheden skyldes en uspecificeret fejl, når "serveServletsByClassnameEnabled" featuren er aktiveret. Yderligere information er ikke tilgængelig. Sårbarheden er rapporteret i version 6.0 til og med 6.0.2.25 samt 6.1 til og med 6.1.0.14 for Distributed, i5/OS og z/OS. Løsning: Installér rettelse via UpdateInstaller (se producentens advisory for detaljer). http://www.ibm.com/support/docview.wss?rs=180&uid=swg21205991 Rapporteret af / Kredit: Rapporteret af producenten. Forløb: 04-02-2008: Tilføjede CVE-reference. Original Advisory: IBM (PK52059): http://www-1.ibm.com/support/docview.wss?uid=swg24018067



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

28 Relaterede Secunia Advisories, displaying 10

Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com. Ideer, foreslag og andet feedback er også meget velkommen.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Debian OpenSSL Predictable Random Number Generator and Update

2.	Microsoft Malware Protection Engine File Parsing Denial of Service

3.	Ubuntu update for openssl

4.	Microsoft Windows XP I2O Utility Filter Driver Privilege Escalation

5.	Build A Niche Store "q" Cross-Site Scripting

6.	cPanel Cross-Site Scripting and Request Forgery Vulnerabilities

7.	ZyXEL ZyWALL 100 "Referer" Cross-Site Scripting Vulnerability

8.	Novell Client Login Long Username/Contex t Buffer Overflow

9.	Gentoo update for aterm, eterm, rxvt, mrxvt, multi-aterm, wterm, and rxvt-unicode

10.	Citrix Access Gateway Unspecified Authentication Bypass